Deployment Architecture

Why am I getting this error when trying to setup a SH cluster: Search Head Clustering is not enabled on this node, Raft REST endpoints are not available!

scc00
Contributor

Trying to setup a search head cluster. Followed the steps to configure the deployer, initialize the members, setting the captain. Any check on the shcluster status comes back with the following error on all members and even the deployer.

"Search Head Clustering is not enabled on this node. Raft REST endpoints are not available!"

The Search Head is already attached to an Indexer cluster. Can anyone explain why the Search Head Cluster will not enable period?

0 Karma

adonio
Ultra Champion
0 Karma

scc00
Contributor

I've actually already tried this but i appreciate the help. My issue is across the deployer, Search head members. I can't even get a status without the error showing up.Even setup a brand new server to host the Deployer with a fresh installation.

0 Karma

scc00
Contributor

I'm on Splunk Enterprise 7.0.1.

0 Karma
Get Updates on the Splunk Community!

Infographic provides the TL;DR for the 2024 Splunk Career Impact Report

We’ve been buzzing with excitement about the recent validation of Splunk Education! The 2024 Splunk Career ...

Enterprise Security Content Update (ESCU) | New Releases

In December, the Splunk Threat Research Team had 1 release of new security content via the Enterprise Security ...

Why am I not seeing the finding in Splunk Enterprise Security Analyst Queue?

(This is the first of a series of 2 blogs). Splunk Enterprise Security is a fantastic tool that offers robust ...