We keep seeing errors of type:
ERROR ArtifactReplicator - Failed to tar into file="C:\Program Files\Splunk\var\run\splunk\dispatch\_splunktemps\send\s2s\scheduler_<...>.tar"
On our search heads. We have four search heads in our cluster and four indexers that are clustered evenly across two sites.
This doesn't seem to be affecting Splunk search or alerting, but the members of the search head cluster keep flipping between "Up" and "Pending" status, which I think might be related.
I've searched extensively, but haven't really been able to find anything. Does anyone know what might be going on?
Thanks in advance!
