Deployment Architecture

Why am I getting this error when trying to setup a SH cluster: Search Head Clustering is not enabled on this node, Raft REST endpoints are not available!

scc00
Contributor

Trying to setup a search head cluster. Followed the steps to configure the deployer, initialize the members, setting the captain. Any check on the shcluster status comes back with the following error on all members and even the deployer.

"Search Head Clustering is not enabled on this node. Raft REST endpoints are not available!"

The Search Head is already attached to an Indexer cluster. Can anyone explain why the Search Head Cluster will not enable period?

0 Karma

adonio
Ultra Champion
0 Karma

scc00
Contributor

I've actually already tried this but i appreciate the help. My issue is across the deployer, Search head members. I can't even get a status without the error showing up.Even setup a brand new server to host the Deployer with a fresh installation.

0 Karma

scc00
Contributor

I'm on Splunk Enterprise 7.0.1.

0 Karma
Get Updates on the Splunk Community!

Enterprise Security Content Update (ESCU) | New Releases

In December, the Splunk Threat Research Team had 1 release of new security content via the Enterprise Security ...

Why am I not seeing the finding in Splunk Enterprise Security Analyst Queue?

(This is the first of a series of 2 blogs). Splunk Enterprise Security is a fantastic tool that offers robust ...

Index This | What are the 12 Days of Splunk-mas?

December 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...