Deployment Architecture

Why did I receive this error while clustering search heads? "Error=Connection refused'

Splunker899
New Member

I am trying to cluster search head
In this process when I am trying to execute cammand for captain
Throwing an ‘error=Connection refused’
But I checked for the ports it was in the listening state

0 Karma

vulnfree
Explorer

I am having similar issue. I am clustering new search heads and electing captain but receiving connection refused from peer search head.

0 Karma

esix_splunk
Splunk Employee
Splunk Employee

Was it working and just recently stopped?

Can you connect to the captain from the remote host? You can use a tool like telnet or nc to confirm that the TCP port in question is open across the network. There could be a firewall between hosts (or on the hosts) that is preventing remote connectivity.

0 Karma

Splunker899
New Member

It was new setup
Yes I can connect to captain from remote server. Firewall is not running and it is stopped and disabled
When I run this command in Captain /opt/splunk/bin/splunk bootstrap shcluster-captain -servers_list "https://SH1:8089,https://SH2:8089" -auth username:pwd
Error
server=https://Captain:8089, error=Connection refused;

0 Karma
Get Updates on the Splunk Community!

Index This | Why did the turkey cross the road?

November 2025 Edition  Hayyy Splunk Education Enthusiasts and the Eternally Curious!   We’re back with this ...

Enter the Agentic Era with Splunk AI Assistant for SPL 1.4

  🚀 Your data just got a serious AI upgrade — are you ready? Say hello to the Agentic Era with the ...

Feel the Splunk Love: Real Stories from Real Customers

Hello Splunk Community,    What’s the best part of hearing how our customers use Splunk? Easy: the positive ...