Deployment Architecture

How can I resolve this error in Indexer?

engrimranzakir
Explorer

Facing below error 

Scanario: no of indexer=3 cluster master=1

Error:The cluster peer is unable to handle request at this time. This means either the cluster peer unable to communicate w/ the cluster manager OR the cluster manager does not have <repFactor> peers added to the cluster. Check the cluster manager dashboard and/or manager_uri/secret settings.

Labels (1)
0 Karma

richgalloway
SplunkTrust
SplunkTrust

Have you confirmed all peers are up and able to connect to the CM?

---
If this reply helps you, Karma would be appreciated.
0 Karma

engrimranzakir
Explorer

yes all 3 peers are up and connected to the CM

0 Karma

isoutamo
SplunkTrust
SplunkTrust

Hi

Have you looked from _internal -logs what it told? There should be more detailed explanation what has caused that message.

r. Ismo

0 Karma
Get Updates on the Splunk Community!

Splunk Enterprise Security 8.x: The Essential Upgrade for Threat Detection, ...

 Prepare to elevate your security operations with the powerful upgrade to Splunk Enterprise Security 8.x! This ...

Get Early Access to AI Playbook Authoring: Apply for the Alpha Private Preview ...

Passionate about security automation? Apply now to our AI Playbook Authoring Alpha private preview ...

Reduce and Transform Your Firewall Data with Splunk Data Management

Managing high-volume firewall data has always been a challenge. Noisy events and verbose traffic logs often ...