Deployment Architecture

Why am I getting error "Got an invalid master uri ?" trying to apply the shcluster-bundle and am unable to deploy apps?


Hello everyone,

I'm running into some trouble deploying apps to my search head cluster. I have a small demo environment set up in my home lab. 2 search heads, 2 indexers, a heavy forwarder, and an instance running all of my deployers. I have indexer clustering working and deploying fine, as is my normal deployment manager. My Search Head cluster master, however, fails to push out apps.

When I run the push command I get an error about an invalid master URI:

bash-4.1$ ./splunk apply shcluster-bundle -target -auth admin:changeme
 Warning: Depending on the configuration changes being pushed, this command might initiate a rolling restart of the cluster members.  Please refer to the documentation for the details. Do you wish to continue? [y/n]: y
Got an invalid master uri ? fromhttps://

This is run on the SH cluster master and the address is that of the cluster captain. I am running this command as the user "splunk" which owns /opt/splunk/*.

When I run the show status command on the captain I also get the cryptic "?":

                  dynamic_captain : 0
                  elected_captain : Mon Nov  9 11:46:20 2015
                               id : FF12C084-634C-4EA4-AB19-5C317941BF37
                 initialized_flag : 0
                            label : SearchHead1
                 maintenance_mode : 0
                         mgmt_uri : ?
            min_peers_joined_flag : 1
             rolling_restart_flag : 0
               service_ready_flag : 0

                            label : SearchHead2
                         mgmt_uri : ?
                   mgmt_uri_alias :
                           status : Up
                            label : SearchHead1
                         mgmt_uri : ?
                   mgmt_uri_alias :
                           status : Up

Really a stumper. I've done some digging and can't really figure it out. I can manually install the apps by hand, but that defeats the purpose of my efforts up until this point.

Any and all input is appreciated, thanks!


I just disabled and afterwards enabled the static captain again.

Now the field mgmt_uri is no longer "?" but resolvinf to the IP and Port. Applying the shcluster-bundle has worked now.

Get Updates on the Splunk Community!

Build Scalable Security While Moving to Cloud - Guide From Clayton Homes

 Clayton Homes faced the increased challenge of strengthening their security posture as they went through ...

Mission Control | Explore the latest release of Splunk Mission Control (2.3)

We’re happy to announce the release of Mission Control 2.3 which includes several new and exciting features ...

Cloud Platform | Migrating your Splunk Cloud deployment to Python 3.7

Python 2.7, the last release of Python 2, reached End of Life back on January 1, 2020. As part of our larger ...