Deployment Architecture

Network Error: Connection reset by peer

Nawab
Communicator

I have deployed a SH cluster and two SHs, every thing is working fine till now.

 

Now I have added a new member to the cluster, all configurations are replicated.

But the apps are not replicated.

Q1: will the apps be replicated on new member automatically or should I run deploy bundle command on deployer.

 

Q2: when I run the command from deployer, I get network layer error and Splunk service is stopped automatically.

Labels (1)
0 Karma

maneshaprabhu
Engager

it should replicate automatically once its joined in SH cluster ,because replication is happening between the members , not with deployer.

1.what is the status of  KVstore status?

2.Newly added member able to connect with rest of the SH member with replication port ?

3.Are you seeing any error in the splunkd.log ?

4.what is your replication factor in SH cluster?

5. did you check the deployer and newly added member pass4symmkey ?

6. if everything looks good , you may  run the splunk resync shcluster-replicated-config  on the newly added member.

0 Karma
Get Updates on the Splunk Community!

Splunk Enterprise Security 8.x: The Essential Upgrade for Threat Detection, ...

 Prepare to elevate your security operations with the powerful upgrade to Splunk Enterprise Security 8.x! This ...

Get Early Access to AI Playbook Authoring: Apply for the Alpha Private Preview ...

Passionate about security automation? Apply now to our AI Playbook Authoring Alpha private preview ...

Reduce and Transform Your Firewall Data with Splunk Data Management

Managing high-volume firewall data has always been a challenge. Noisy events and verbose traffic logs often ...