Getting Data In

Can a 6.3.3 standalone Search Head connect to a 6.4.1 indexer in an indexer cluster?

a212830
Champion

Hi,

We've set up our dev environment to use 6.4.1, and are testing it with some customers. When they try to add the 6.4.1 search peers to their 6.3.3 Search Head, we get errors:

Encountered the following error while trying to save: In handler 'distsearch-peer': Error while sending public key to search peer: Connection reset by peer

Are these compatible?

0 Karma

somesoni2
Revered Legend

Starting with 6.3, the peer nodes and search heads can run on different versions from each other. The search heads must always run at the same or a higher level than the peer nodes.

So Answer is no.

Courtesy:
http://docs.splunk.com/Documentation/Splunk/6.4.1/Indexer/Systemrequirements#Compatibility_between_p...

0 Karma
Get Updates on the Splunk Community!

.conf24 | Day 0

Hello Splunk Community! My name is Chris, and I'm based in Canberra, Australia's capital, and I travelled for ...

Enhance Security Visibility with Splunk Enterprise Security 7.1 through Threat ...

 (view in My Videos)Struggling with alert fatigue, lack of context, and prioritization around security ...

Troubleshooting the OpenTelemetry Collector

  In this tech talk, you’ll learn how to troubleshoot the OpenTelemetry collector - from checking the ...