Deployment Architecture

unable to search static captain during search head clustering. - RESOLVED

vikram_m
Path Finder

We have followed the link to create a search head cluster.
https://na01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fdocs.splunk.com%2FDocumentation%2FS...

however it says finally we need to initiate a captain then captain election will be random.

On all the servers we connected them to the deployment server and when I hit the final command to elect a captain for the first time I see below error.

I checked all 8089 and the mgmt port for Search replication are opened on VM level on all the search heads but it giving following erorr.

[splunk@search1 bin]$ ./splunk bootstrap shcluster-captain -servers_list ":8089,:8089,:8089 " -auth admin:******
Failed to Set Configuration. One potential reason is captain could not hear back from all the nodes in a timeout period. Ensure all to be added nodes are up, and increase the raft timeout. If all nodes are up and running, look at splunkd.log for appendEntries errors due to mgmt_uri mismatch

Thanks for your reply.
Vikram.

0 Karma
1 Solution

vikram_m
Path Finder

I found the issue...it was port internal communication port was not open....opening the port resolved the issue.

View solution in original post

0 Karma

vikram_m
Path Finder

I found the issue...it was port internal communication port was not open....opening the port resolved the issue.

0 Karma

adonio
Ultra Champion

hello there,
here is an answer regarding your situation:
https://answers.splunk.com/answers/209975/search-head-cluster-why-am-i-getting-connection-re.html
also pay attention to terminology, i assume you mean the Search Head Cluster Deployer and not Deployment Server
lastly, follow the Splunk official documentations to build your Search Head Cluster
http://docs.splunk.com/Documentation/Splunk/6.6.2/DistSearch/SHCdeploymentoverview
hope it helps

0 Karma
Get Updates on the Splunk Community!

[Puzzles] Solve, Learn, Repeat: Dynamic formatting from XML events

This challenge was first posted on Slack #puzzles channelFor a previous puzzle, I needed a set of fixed-length ...

Enter the Agentic Era with Splunk AI Assistant for SPL 1.4

  🚀 Your data just got a serious AI upgrade — are you ready? Say hello to the Agentic Era with the ...

Stronger Security with Federated Search for S3, GCP SQL & Australian Threat ...

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...