I used
https://myHost:8089/services/cluster/master/control/control/rebalance_primaries
as described in the manual at How primary rebalancing works
myHost is a functioning Cluster Master; it is not in maintenance mode and it is both valid and complete. There are no pending fixup tasks. It is running:
Splunk Version 6.5.1
Splunk Build f74036626f0c
and I got this result:
<response>
<messages>
<msg type="ERROR">
handler=clustermastercontrol method expected=POST does not match actual=GET customaction=rebalance_primaries
</msg>
</messages>
</response>
What did I do wrong? Thanks!
(ref: http://docs.splunk.com/Documentation/Splunk/6.5.1/Indexer/Rebalancethecluster )
The returned error message indicates you need a POST request.
curl -k -u admin:pass --request POST \
https://localhost:8089/services/cluster/master/control/control/rebalance_primaries
Hope this works.
Lesson learned: Both the rest command in Splunk (from the master node)
| rest /services/cluster/master/control/control/rebalance_primaries splunk_server=local
and the browser interface use an HTTP GET. This is great for retrieving info, but doesn't work for triggering the rebalancing action.
(ref: http://docs.splunk.com/Documentation/Splunk/6.5.1/Indexer/Rebalancethecluster )
The returned error message indicates you need a POST request.
curl -k -u admin:pass --request POST \
https://localhost:8089/services/cluster/master/control/control/rebalance_primaries
Hope this works.