Deployment Architecture

How to fix error: Cannot pick primary as the bucket hasn't rolled yet

basher590
Engager

Hi,

I have a cluster consisting of 2 indexers. At the weekend one of my indexers shut down unexpectedly and since then (6 days now) 20 of my 24 buckets are not fully searchable.
Looking at the Bucket Status page under the fixup tasks - Generation, there are entries for each bucket that has a problem like so.

payin~5~EF268AB0-A0AA-425A-B52F-0C1CD1542A76 payin Received shutdown notification from peer=EF268AB0-A0AA-425A-B52F-0C1CD1542A76 12/03/2016 06:01 Cannot pick primary as the bucket hasn't rolled yet.;

I have tried restarting the indexer that these messages refer to but that didn't make any difference.

Anyone got any ideas?

Thanks

0 Karma

alemarzu
Motivator

Hi basher,

Whats the bucket status on Cluster Master's Dashboard ?

You should also read this, http://docs.splunk.com/Documentation/Splunk/latest/Troubleshooting/CommandlinetoolsforusewithSupport...

0 Karma
Career Survey
First 500 qualified respondents will receive a $20 gift card! Tell us about your professional Splunk journey.

Can’t make it to .conf25? Join us online!

Get Updates on the Splunk Community!

Community Content Calendar, September edition

Welcome to another insightful post from our Community Content Calendar! We're thrilled to continue bringing ...

Splunkbase Unveils New App Listing Management Public Preview

Splunkbase Unveils New App Listing Management Public PreviewWe're thrilled to announce the public preview of ...

Leveraging Automated Threat Analysis Across the Splunk Ecosystem

Are you leveraging automation to its fullest potential in your threat detection strategy?Our upcoming Security ...