Deployment Architecture

Why did I receive this error while clustering search heads? "Error=Connection refused'

Splunker899
New Member

I am trying to cluster search head
In this process when I am trying to execute cammand for captain
Throwing an ‘error=Connection refused’
But I checked for the ports it was in the listening state

0 Karma

vulnfree
Explorer

I am having similar issue. I am clustering new search heads and electing captain but receiving connection refused from peer search head.

0 Karma

esix_splunk
Splunk Employee
Splunk Employee

Was it working and just recently stopped?

Can you connect to the captain from the remote host? You can use a tool like telnet or nc to confirm that the TCP port in question is open across the network. There could be a firewall between hosts (or on the hosts) that is preventing remote connectivity.

0 Karma

Splunker899
New Member

It was new setup
Yes I can connect to captain from remote server. Firewall is not running and it is stopped and disabled
When I run this command in Captain /opt/splunk/bin/splunk bootstrap shcluster-captain -servers_list "https://SH1:8089,https://SH2:8089" -auth username:pwd
Error
server=https://Captain:8089, error=Connection refused;

0 Karma
Get Updates on the Splunk Community!

Splunk Decoded: Service Maps vs Service Analyzer Tree View vs Flow Maps

It’s Monday morning, and your phone is buzzing with alert escalations – your customer-facing portal is running ...

What’s New in Splunk Observability – September 2025

What's NewWe are excited to announce the latest enhancements to Splunk Observability, designed to help ITOps ...

Fun with Regular Expression - multiples of nine

Fun with Regular Expression - multiples of nineThis challenge was first posted on Slack #regex channel ...