Deployment Architecture

How to resolve Captain Connection error?

Abdullah
Explorer

Dears,

We have the 3 SHC servers, and appearing below error in the health check icon on all SCH servers, you can see the screen shot.

Captain Connection

 

  • Root Cause(s):
    • Classic bundle replication in Search Head Cluster has failed.
  • Unhealthy Instances:
    • XXXXX

     

    Please your support for that.

     

    Best Regards,

Labels (1)
Tags (1)
0 Karma

Abdullah
Explorer

Hi @richgalloway 

Only I can see below errors on splunkd.log for one of SHC.

10-31-2022 09:07:59.779 +0300 WARN ConfMetrics [173553 ConfReplicationThread] - single_action=PUSH_TO took wallclock_ms=28816! Consider a lower value of conf_replication_max_push_count in server.conf on all members

10-31-2022 09:08:15.562 +0300 WARN HttpListener [208689 HttpDedicatedIoThread-1] - Socket error from 127.0.0.1:49198 while accessing //servicesNS/nobody/splunk_secure_gateway/data/inputs/ssg_enable_modular_input/default/disable: Broken pipe
1

10-31-2022 09:08:20.433 +0300 WARN LocalAppsAdminHandler [100239 TcpChannelThread] - Using deprecated capabilities for write: admin_all_objects or edit_local_apps. See enable_install_apps in limits.conf
10-31-2022 09:08:20.477 +0300 WARN LocalAppsAdminHandler [9534 TcpChannelThread] - Using deprecated capabilities for write: admin_all_objects or edit_local_apps. See enable_install_apps in limits.conf
10-31-2022 09:08:20.513 +0300 WARN LocalAppsAdminHandler [34267 TcpChannelThread] - Using deprecated capabilities for write: admin_all_objects or edit_local_apps. See enable_install_apps in limits.conf
10-31-2022 09:08:20.518 +0300 WARN LocalAppsAdminHandler [157525 TcpChannelThread] - Using deprecated capabilities for write: admin_all_objects or edit_local_apps. See enable_install_apps in limits.conf
10-31-2022 09:08:20.558 +0300 WARN LocalAppsAdminHandler [165755 TcpChannelThread] - Using deprecated capabilities for write: admin_all_objects or edit_local_apps. See enable_install_apps in limits.conf
10-31-2022 09:08:20.606 +0300 WARN LocalAppsAdminHandler [103480 TcpChannelThread] - Using deprecated capabilities for write: admin_all_objects or edit_local_apps. See enable_install_apps in limits.conf
10-31-2022 09:08:20.609 +0300 WARN ConfReplicationThread [173553 ConfReplicationThread] - Error pushing configurations to captain=https://10.99.19.24:8089, consecutiveErrors=1 msg="Error in acceptPush: Non-200 status_code=400: ConfReplicationException: Cannot accept push with outdated_baseline_op_id=b171c01b88a8b8e9c8f9db9dbfcfb367de3ff073; current_baseline_op_id=a6fdcc3a9e93aa6d64c63fdc43005bc11210a972"
10-31-2022 09:08:20.617 +0300 WARN LocalAppsAdminHandler [34267 TcpChannelThread] - Using deprecated capabilities for write: admin_all_objects or edit_local_apps. See enable_install_apps in limits.conf
10-31-2022 09:08:20.634 +0300 WARN LocalAppsAdminHandler [245085 TcpChannelThread] - Using deprecated capabilities for write: admin_all_objects or edit_local_apps. See enable_install_apps in limits.conf
10-31-2022 09:08:20.640 +0300 WARN LocalAppsAdminHandler [34267 TcpChannelThread] - Using deprecated capabilities for write: admin_all_objects or edit_local_apps. See enable_install_apps in limits.conf
10-31-2022 09:08:20.647 +0300 WARN LocalAppsAdminHandler [137654 TcpChannelThread] - Using deprecated capabilities for write: admin_all_objects or edit_local_apps. See enable_install_apps in limits.conf
10-31-2022 09:08:20.852 +0300 WARN LocalAppsAdminHandler [100022 TcpChannelThread] - Using deprecated capabilities for write: admin_all_objects or edit_local_apps. See enable_install_apps in limits.conf
10-31-2022 09:08:20.885 +0300 WARN LocalAppsAdminHandler [100022 TcpChannelThread] - Using deprecated capabilities for write: admin_all_objects or edit_local_apps. See enable_install_apps in limits.conf
10-31-2022 09:08:20.955 +0300 WARN LocalAppsAdminHandler [7721 TcpChannelThread] - Using deprecated capabilities for write: admin_all_objects or edit_local_apps. See enable_install_apps in limits.conf
10-31-2022 09:08:21.073 +0300 WARN LocalAppsAdminHandler [73456 TcpChannelThread] - Using deprecated capabilities for write: admin_all_objects or edit_local_apps. See enable_install_apps in limits.conf
10-31-2022 09:08:21.077 +0300 WARN LocalAppsAdminHandler [127923 TcpChannelThread] - Using deprecated capabilities for write: admin_all_objects or edit_local_apps. See enable_install_apps in limits.conf
10-31-2022 09:08:21.085 +0300 WARN LocalAppsAdminHandler [65584 TcpChannelThread] - Using deprecated capabilities for write: admin_all_objects or edit_local_apps. See enable_install_apps in limits.conf
10-31-2022 09:08:21.280 +0300 WARN LocalAppsAdminHandler [179686 TcpChannelThread] - Using deprecated capabilities for write: admin_all_objects or edit_local_apps. See enable_install_apps in limits.conf
10-31-2022 09:08:21.365 +0300 WARN LocalAppsAdminHandler [179686 TcpChannelThread] - Using deprecated capabilities for write: admin_all_objects or edit_local_apps. See enable_install_apps in limits.conf
10-31-2022 09:08:21.368 +0300 WARN LocalAppsAdminHandler [99705 TcpChannelThread] - Using deprecated capabilities for write: admin_all_objects or edit_local_apps. See enable_install_apps in limits.conf
10-31-2022 09:08:21.422 +0300 WARN LocalAppsAdminHandler [103480 TcpChannelThread] - Using deprecated capabilities for write: admin_all_objects or edit_local_apps. See enable_install_apps in limits.conf
10-31-2022 09:08:21.430 +0300 INFO AutoLoadBalancedConnectionStrategy [199471 TcpOutEloop] - Connected to idx=10.99.19.32:9997:0, pset=0, reuse=0. autoBatch=1
10-31-2022 09:08:21.446 +0300 WARN LocalAppsAdminHandler [102067 TcpChannelThread] - Using deprecated capabilities for write: admin_all_objects or edit_local_apps. See enable_install_apps in limits.conf
10-31-2022 09:08:21.451 +0300 WARN LocalAppsAdminHandler [100239 TcpChannelThread] - Using deprecated capabilities for write: admin_all_objects or edit_local_apps. See enable_install_apps in limits.conf
10-31-2022 09:08:21.454 +0300 WARN LocalAppsAdminHandler [128022 TcpChannelThread] - Using deprecated capabilities for write: admin_all_objects or edit_local_apps. See enable_install_apps in limits.conf
10-31-2022 09:08:21.459 +0300 WARN LocalAppsAdminHandler [103480 TcpChannelThread] - Using deprecated capabilities for write: admin_all_objects or edit_local_apps. See enable_install_apps in limits.conf
10-31-2022 09:08:21.493 +0300 WARN LocalAppsAdminHandler [116746 TcpChannelThread] - Using deprecated capabilities for write: admin_all_objects or edit_local_apps. See enable_install_apps in limits.conf
10-31-2022 09:08:21.512 +0300 WARN LocalAppsAdminHandler [116746 TcpChannelThread] - Using deprecated capabilities for write: admin_all_objects or edit_local_apps. See enable_install_apps in limits.conf
10-31-2022 09:08:21.545 +0300 WARN LocalAppsAdminHandler [116746 TcpChannelThread] - Using deprecated capabilities for write: admin_all_objects or edit_local_apps. See enable_install_apps in limits.conf

 

Regards,

0 Karma

richgalloway
SplunkTrust
SplunkTrust

Have you checked splunkd.log?

---
If this reply helps you, Karma would be appreciated.
0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Index This | What travels the world but is also stuck in place?

April 2026 Edition  Hayyy Splunk Education Enthusiasts and the Eternally Curious!   We’re back with this ...

Discover New Use Cases: Unlock Greater Value from Your Existing Splunk Data

Realizing the full potential of your Splunk investment requires more than just understanding current usage; it ...

Continue Your Journey: Join Session 2 of the Data Management and Federation Bootcamp ...

As data volumes continue to grow and environments become more distributed, managing and optimizing data ...