Deployment Architecture

Problem while trying to run status command for search head clustering

Sourabhv05
Communicator

When i am trying to execute search head status command "splunk show shcluster-status -auth admin:password" from command promt at one of my Search head, It just return back to console without showing any status.

I have admin rights at the servers. What can be the issue ? Why i am not able to see the status of my search head cluster

0 Karma

mahamed_splunk
Splunk Employee
Splunk Employee

Is it happening on only one of the nodes or on all nodes ?

One reason could be that this SH is not properly added to SHC and is not part of SHC, hence the status command doesn't return anything

0 Karma

Sourabhv05
Communicator

Hi mahamed_splunk,

I am able to run the initialize command but while creating a captain by running bootstrap command

splunk bootstrap shcluster-captain -servers_list ":,:,..."

I am getting error as "splunk does not recognize bootstrap command. Please check command or go to Splunk help".

Please let me know why this error occurs as in documentation this command is mentioned

0 Karma
Get Updates on the Splunk Community!

Building Reliable Asset and Identity Frameworks in Splunk ES

 Accurate asset and identity resolution is the backbone of security operations. Without it, alerts are ...

Cloud Monitoring Console - Unlocking Greater Visibility in SVC Usage Reporting

For Splunk Cloud customers, understanding and optimizing Splunk Virtual Compute (SVC) usage and resource ...

Automatic Discovery Part 3: Practical Use Cases

If you’ve enabled Automatic Discovery in your install of the Splunk Distribution of the OpenTelemetry ...