Installation

KVStore Upgrade wiredTiger static captain

dokaas_2
Communicator

The upgrade to KVStore engine wiredTiger fails with 'Search head cluster has static captain"  This is a two node search head cluster (adding a 3rd search head is not an option at this time).    So how do I upgrade the KVStore engine to wiredTiger?

Labels (1)
Tags (2)
0 Karma

burwell
SplunkTrust
SplunkTrust

Hi. You need to have three search heads as a minimum in a search head cluster https://docs.splunk.com/Documentation/Splunk/8.2.3/DistSearch/SHCarchitecture

I am not sure how you have setup a cluster with only two heads.

 

 

0 Karma

dokaas_2
Communicator

This is off subject, but you need three search heads if you allow for the search heads to elect the captain.  Technically you can have a cluster of two if you manually set the search head captain.  You can set up a search head cluster with only 1 search head and add search heads later.  In fact, there are some advantages of having multiple single search heads and using the deployer to manage application distribution across your enterprise.

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Why Splunk Customers Should Attend Cisco Live 2026 Las Vegas

Why Splunk Customers Should Attend Cisco Live 2026 Las Vegas     Cisco Live 2026 is almost here, and this ...

What Is the Name of the USB Key Inserted by Bob Smith? (BOTS Hint, Not the Answer)

Hello Splunkers,   So you searched, “what is the name of the usb key inserted by bob smith?”  Not gonna lie… ...

Automating Threat Operations and Threat Hunting with Recorded Future

    Automating Threat Operations and Threat Hunting with Recorded Future June 29, 2026 | Register   Is your ...