Deployment Architecture

Why did I receive this error while clustering search heads? "Error=Connection refused'

Splunker899
New Member

I am trying to cluster search head
In this process when I am trying to execute cammand for captain
Throwing an ‘error=Connection refused’
But I checked for the ports it was in the listening state

0 Karma

vulnfree
Explorer

I am having similar issue. I am clustering new search heads and electing captain but receiving connection refused from peer search head.

0 Karma

esix_splunk
Splunk Employee
Splunk Employee

Was it working and just recently stopped?

Can you connect to the captain from the remote host? You can use a tool like telnet or nc to confirm that the TCP port in question is open across the network. There could be a firewall between hosts (or on the hosts) that is preventing remote connectivity.

0 Karma

Splunker899
New Member

It was new setup
Yes I can connect to captain from remote server. Firewall is not running and it is stopped and disabled
When I run this command in Captain /opt/splunk/bin/splunk bootstrap shcluster-captain -servers_list "https://SH1:8089,https://SH2:8089" -auth username:pwd
Error
server=https://Captain:8089, error=Connection refused;

0 Karma
Get Updates on the Splunk Community!

Index This | What did the zero say to the eight?

June 2025 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with this month’s ...

Splunk Observability Cloud's AI Assistant in Action Series: Onboarding New Hires & ...

This is the fifth post in the Splunk Observability Cloud’s AI Assistant in Action series that digs into how to ...

Now Playing: Splunk Education Summer Learning Premieres

It’s premiere season, and Splunk Education is rolling out new releases you won’t want to miss. Whether you’re ...