Deployment Architecture

Why did I receive this error while clustering search heads? "Error=Connection refused'

Splunker899
New Member

I am trying to cluster search head
In this process when I am trying to execute cammand for captain
Throwing an ‘error=Connection refused’
But I checked for the ports it was in the listening state

0 Karma

vulnfree
Explorer

I am having similar issue. I am clustering new search heads and electing captain but receiving connection refused from peer search head.

0 Karma

esix_splunk
Splunk Employee
Splunk Employee

Was it working and just recently stopped?

Can you connect to the captain from the remote host? You can use a tool like telnet or nc to confirm that the TCP port in question is open across the network. There could be a firewall between hosts (or on the hosts) that is preventing remote connectivity.

0 Karma

Splunker899
New Member

It was new setup
Yes I can connect to captain from remote server. Firewall is not running and it is stopped and disabled
When I run this command in Captain /opt/splunk/bin/splunk bootstrap shcluster-captain -servers_list "https://SH1:8089,https://SH2:8089" -auth username:pwd
Error
server=https://Captain:8089, error=Connection refused;

0 Karma
Get Updates on the Splunk Community!

Splunk App for Anomaly Detection End of Life Announcment

Q: What is happening to the Splunk App for Anomaly Detection?A: Splunk is officially announcing the ...

Aligning Observability Costs with Business Value: Practical Strategies

 Join us for an engaging Tech Talk on Aligning Observability Costs with Business Value: Practical ...

Mastering Data Pipelines: Unlocking Value with Splunk

 In today's AI-driven world, organizations must balance the challenges of managing the explosion of data with ...