Deployment Architecture

Why did I receive this error while clustering search heads? "Error=Connection refused'

Splunker899
New Member

I am trying to cluster search head
In this process when I am trying to execute cammand for captain
Throwing an ‘error=Connection refused’
But I checked for the ports it was in the listening state

0 Karma

vulnfree
Explorer

I am having similar issue. I am clustering new search heads and electing captain but receiving connection refused from peer search head.

0 Karma

esix_splunk
Splunk Employee
Splunk Employee

Was it working and just recently stopped?

Can you connect to the captain from the remote host? You can use a tool like telnet or nc to confirm that the TCP port in question is open across the network. There could be a firewall between hosts (or on the hosts) that is preventing remote connectivity.

0 Karma

Splunker899
New Member

It was new setup
Yes I can connect to captain from remote server. Firewall is not running and it is stopped and disabled
When I run this command in Captain /opt/splunk/bin/splunk bootstrap shcluster-captain -servers_list "https://SH1:8089,https://SH2:8089" -auth username:pwd
Error
server=https://Captain:8089, error=Connection refused;

0 Karma
Career Survey
First 500 qualified respondents will receive a $20 gift card! Tell us about your professional Splunk journey.

Can’t make it to .conf25? Join us online!

Get Updates on the Splunk Community!

Community Content Calendar, September edition

Welcome to another insightful post from our Community Content Calendar! We're thrilled to continue bringing ...

Splunkbase Unveils New App Listing Management Public Preview

Splunkbase Unveils New App Listing Management Public PreviewWe're thrilled to announce the public preview of ...

Leveraging Automated Threat Analysis Across the Splunk Ecosystem

Are you leveraging automation to its fullest potential in your threat detection strategy?Our upcoming Security ...