Deployment Architecture

failed_because_BUNDLE_DATA_TRANSMIT_FAILURE

Engager

Dear Team,

We have a cluster step up where 3 search head(cluster) , 3 indexer(cluster),1 index master,1 deployer, 1 license master
We are getting below mentioned errors in the production system in one of the search head.

Error Message: "Unable to distribute to peer named xxx5012.xxxx.com at uri https://xx.41.xxx.xx:8089 because replication was unsuccessful. replicationStatus Failed failure info: failedbecauseBUNDLEDATATRANSMIT_FAILURE Please verify connectivity to the search peer, that the search peer is up, and an adequate level of system resources are available. See the Troubleshooting Manual for more information."

Can you please help us in solving it.

Regards,
Santosh

0 Karma

Builder

Did you check the bundle size that you are sending from the search heads to the indexers ?

0 Karma

SplunkTrust
SplunkTrust

Have followed the suggestions in the error message? Verified the SH can connect to the indexer? Checked the resources on the indexer? Read the Troubleshooting manual?

---
If this reply helps you, an upvote would be appreciated.

Engager

Hi Richgalloway,

Thanks for replying.

We are looking into them already without any luck so far. Just to add to the above, we have recently upgraded our system.
SH's : c4.8x to c5.18x
Indexer: c4.8x to c5.9x
deployer:c4.8x to c5.9x
index master: c4.8x to c5.9x
license manager: c4.8x to c5.9x

Do we need to re authenticate search heads and indexers after upgrading?

Regards,
Santosh.

0 Karma

SplunkTrust
SplunkTrust

Someone else will have to answer that question.

---
If this reply helps you, an upvote would be appreciated.
0 Karma