Deployment Architecture

Problem while trying to run status command for search head clustering

Sourabhv05
Communicator

When i am trying to execute search head status command "splunk show shcluster-status -auth admin:password" from command promt at one of my Search head, It just return back to console without showing any status.

I have admin rights at the servers. What can be the issue ? Why i am not able to see the status of my search head cluster

0 Karma

mahamed_splunk
Splunk Employee
Splunk Employee

Is it happening on only one of the nodes or on all nodes ?

One reason could be that this SH is not properly added to SHC and is not part of SHC, hence the status command doesn't return anything

0 Karma

Sourabhv05
Communicator

Hi mahamed_splunk,

I am able to run the initialize command but while creating a captain by running bootstrap command

splunk bootstrap shcluster-captain -servers_list ":,:,..."

I am getting error as "splunk does not recognize bootstrap command. Please check command or go to Splunk help".

Please let me know why this error occurs as in documentation this command is mentioned

0 Karma
Get Updates on the Splunk Community!

Splunk Training for All: Meet Aspiring Cybersecurity Analyst, Marc Alicea

Splunk Education believes in the value of training and certification in today’s rapidly-changing data-driven ...

Investigate Security and Threat Detection with VirusTotal and Splunk Integration

As security threats and their complexities surge, security analysts deal with increased challenges and ...

Observability Highlights | January 2023 Newsletter

 January 2023New Product Releases Splunk Network Explorer for Infrastructure MonitoringSplunk unveils Network ...