Deployment Architecture

Problem while trying to run status command for search head clustering

Sourabhv05
Communicator

When i am trying to execute search head status command "splunk show shcluster-status -auth admin:password" from command promt at one of my Search head, It just return back to console without showing any status.

I have admin rights at the servers. What can be the issue ? Why i am not able to see the status of my search head cluster

0 Karma

mahamed_splunk
Splunk Employee
Splunk Employee

Is it happening on only one of the nodes or on all nodes ?

One reason could be that this SH is not properly added to SHC and is not part of SHC, hence the status command doesn't return anything

0 Karma

Sourabhv05
Communicator

Hi mahamed_splunk,

I am able to run the initialize command but while creating a captain by running bootstrap command

splunk bootstrap shcluster-captain -servers_list ":,:,..."

I am getting error as "splunk does not recognize bootstrap command. Please check command or go to Splunk help".

Please let me know why this error occurs as in documentation this command is mentioned

0 Karma
Get Updates on the Splunk Community!

What the End of Support for Splunk Add-on Builder Means for You

Hello Splunk Community! We want to share an important update regarding the future of the Splunk Add-on Builder ...

Solve, Learn, Repeat: New Puzzle Channel Now Live

Welcome to the Splunk Puzzle PlaygroundIf you are anything like me, you love to solve problems, and what ...

Building Reliable Asset and Identity Frameworks in Splunk ES

 Accurate asset and identity resolution is the backbone of security operations. Without it, alerts are ...