Deployment Architecture

unable to search static captain during search head clustering. - RESOLVED

vikram_m
Path Finder

We have followed the link to create a search head cluster.
https://na01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fdocs.splunk.com%2FDocumentation%2FS...

however it says finally we need to initiate a captain then captain election will be random.

On all the servers we connected them to the deployment server and when I hit the final command to elect a captain for the first time I see below error.

I checked all 8089 and the mgmt port for Search replication are opened on VM level on all the search heads but it giving following erorr.

[splunk@search1 bin]$ ./splunk bootstrap shcluster-captain -servers_list ":8089,:8089,:8089 " -auth admin:******
Failed to Set Configuration. One potential reason is captain could not hear back from all the nodes in a timeout period. Ensure all to be added nodes are up, and increase the raft timeout. If all nodes are up and running, look at splunkd.log for appendEntries errors due to mgmt_uri mismatch

Thanks for your reply.
Vikram.

0 Karma
1 Solution

vikram_m
Path Finder

I found the issue...it was port internal communication port was not open....opening the port resolved the issue.

View solution in original post

0 Karma

vikram_m
Path Finder

I found the issue...it was port internal communication port was not open....opening the port resolved the issue.

0 Karma

adonio
Ultra Champion

hello there,
here is an answer regarding your situation:
https://answers.splunk.com/answers/209975/search-head-cluster-why-am-i-getting-connection-re.html
also pay attention to terminology, i assume you mean the Search Head Cluster Deployer and not Deployment Server
lastly, follow the Splunk official documentations to build your Search Head Cluster
http://docs.splunk.com/Documentation/Splunk/6.6.2/DistSearch/SHCdeploymentoverview
hope it helps

0 Karma
Career Survey
First 500 qualified respondents will receive a $20 gift card! Tell us about your professional Splunk journey.

Can’t make it to .conf25? Join us online!

Get Updates on the Splunk Community!

Community Content Calendar, September edition

Welcome to another insightful post from our Community Content Calendar! We're thrilled to continue bringing ...

Splunkbase Unveils New App Listing Management Public Preview

Splunkbase Unveils New App Listing Management Public PreviewWe're thrilled to announce the public preview of ...

Leveraging Automated Threat Analysis Across the Splunk Ecosystem

Are you leveraging automation to its fullest potential in your threat detection strategy?Our upcoming Security ...