SH Pool Error in Python Log

[jnoga]

I have a SH pool 6.1.3 and am seeing this error in the pyton_modular_input.log. I also have ES 3.1.1 installed. This error is affecting my ability to merge assets in to asset lookup list.

file=lookup_modinput.py:run:503 | status="exiting, not master host" msg=Not selecting this search head pool member as master host based on alphabetical ordering ({0}). To override, define master_host in inputs.conf.

Does anyone have a clue on how to resolve this issue or where to look?

Racking my brain on this one.
Thanks in advance.
Joe

[martin_mueller · Accepted solution]

As per the inputs.conf.spec in SA-ThreatIntelligence you'll want to set that master_host setting in inputs.conf:

master_host = <string>
* [DEFAULT_STANZA_ONLY] Defines the master host if search head pooling is enabled.
* Only the master host will perform threat list downloads. If SHP is enabled this
* MUST be non-empty AND match the name of a server in the pool.

[jnoga]

Thanks Martin I will give this a shot!
Joe