Deployment Architecture

Why am I getting this error when trying to setup a SH cluster: Search Head Clustering is not enabled on this node, Raft REST endpoints are not available!

scc00
Contributor

Trying to setup a search head cluster. Followed the steps to configure the deployer, initialize the members, setting the captain. Any check on the shcluster status comes back with the following error on all members and even the deployer.

"Search Head Clustering is not enabled on this node. Raft REST endpoints are not available!"

The Search Head is already attached to an Indexer cluster. Can anyone explain why the Search Head Cluster will not enable period?

0 Karma

adonio
Ultra Champion
0 Karma

scc00
Contributor

I've actually already tried this but i appreciate the help. My issue is across the deployer, Search head members. I can't even get a status without the error showing up.Even setup a brand new server to host the Deployer with a fresh installation.

0 Karma

scc00
Contributor

I'm on Splunk Enterprise 7.0.1.

0 Karma
Get Updates on the Splunk Community!

Now Available: Cisco Talos Threat Intelligence Integrations for Splunk Security Cloud ...

At .conf24, we shared that we were in the process of integrating Cisco Talos threat intelligence into Splunk ...

Preparing your Splunk Environment for OpenSSL3

The Splunk platform will transition to OpenSSL version 3 in a future release. Actions are required to prepare ...

Easily Improve Agent Saturation with the Splunk Add-on for OpenTelemetry Collector

Agent Saturation What and Whys In application performance monitoring, saturation is defined as the total load ...