Deployment Architecture

Network Error: Connection reset by peer

Nawab
Communicator

I have deployed a SH cluster and two SHs, every thing is working fine till now.

 

Now I have added a new member to the cluster, all configurations are replicated.

But the apps are not replicated.

Q1: will the apps be replicated on new member automatically or should I run deploy bundle command on deployer.

 

Q2: when I run the command from deployer, I get network layer error and Splunk service is stopped automatically.

Labels (1)
0 Karma

maneshaprabhu
Engager

it should replicate automatically once its joined in SH cluster ,because replication is happening between the members , not with deployer.

1.what is the status of  KVstore status?

2.Newly added member able to connect with rest of the SH member with replication port ?

3.Are you seeing any error in the splunkd.log ?

4.what is your replication factor in SH cluster?

5. did you check the deployer and newly added member pass4symmkey ?

6. if everything looks good , you may  run the splunk resync shcluster-replicated-config  on the newly added member.

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Meet the .conf26 AI Agent Buildathon Winners

At the .conf26 AI Agent Buildathon, Splunk users turned their operational expertise into working AI agents ...

Trusted Autonomy in the SOC: A Maturity Journey

AI is compressing attacker timelines and pushing SOC teams beyond human capacity thresholds. The next SOC ...

Supercharging Windows Security Detection Performance: Introducing Hybrid Field ...

Windows event logs—from Security auditing and Sysmon to PowerShell script blocks—form the operational backbone ...