Installation

Problems after cluster update from 5.0.2 to 6.0.1

AT
New Member

A have ten machines in cluster, which were update according to manual (docs.splunk.com/Documentation/Splunk/6.0/Indexer/Upgradeacluster) . Everything seems to be fine (indexes and peers are in 'searchable' state), but when I'm trying to performe search from search-head, I recieve:

Unable to distribute to peer named hostname at uri hostname.net:8089 because peer has status = "Peer member of cluster and in distsearch.conf".

What does it mean ?

0 Karma

AT
New Member

I've just figured out that root of problem was in file
/opt/splunk/etc/system/local/distsearch.conf:

[distributedSearch]

servers = a-3:8089,
a-4:8089,
a-2:8089,
b-2:8089,
b-3:8089,
b-4:8089,
b-0:8089,
a-0:8089,
a-1:8089,
b-1:8089

disabled = 0

removedTimedOutServers = 1

Which was inherited from before-clustering ages.
After I've set

disabled = 1

Error messages gone.

0 Karma
Get Updates on the Splunk Community!

.conf24 | Registration Open!

Hello, hello! I come bearing good news: Registration for .conf24 is now open!   conf is Splunk’s rad annual ...

ICYMI - Check out the latest releases of Splunk Edge Processor

Splunk is pleased to announce the latest enhancements to Splunk Edge Processor.  HEC Receiver authorization ...

Introducing the 2024 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...