Deployment Architecture

What does "Failed to create result provider for remote peer " mean?

matt
Splunk Employee
Splunk Employee

I've got a distributed search setup (standalone search head and an indexer) that has been working like a champ for awhile . Recently I started to see this message when I run a search:

Failed to create result provider for remote peer 'splunk.example.com' at uri 'https://splunk.example.com:8089' with the stream...

To my knowledge nothing has changed in my enviornment. What does this message mean and how can I prevent it?

Mick
Splunk Employee
Splunk Employee

A 'result provider' is basically a search connection, how stable is your connection to that box? Can you get to the Splunk instance running on splunk.example.com with a browser or CLI?

Get Updates on the Splunk Community!

Your Guide to Splunk Digital Experience Monitoring

A flawless digital experience isn't just an advantage, it's key to customer loyalty and business success. But ...

Data Management Digest – November 2025

  Welcome to the inaugural edition of Data Management Digest! As your trusted partner in data innovation, the ...

Upcoming Webinar: Unmasking Insider Threats with Slunk Enterprise Security’s UEBA

Join us on Wed, Dec 10. at 10AM PST / 1PM EST for a live webinar and demo with Splunk experts! Discover how ...