Installation

Splunk Indexer Clustering Issues- How to resolve error [00000100]?

govindashwin8
Loves-to-Learn Lots

I am trying to set up an indexer cluster with one master, 2 indexers and a search head, using splunk enterprise version 7.2.3.
After configuring the master and the indexers I see the indexers as sick 

Error [00000100] Instance name "xxxxx-1001264746-1-1088387397" REST interface to peer is not responding. Check var/log/splunk/splunkd_access.log on the peer. 

On the access logs :-

10.236.9.173 - splunk-system-user [25/Dec/2020:00:46:54.047 +0000] "GET /services/admin/bundles/xxxxx-1001264746-3-1088390176?count=-1 HTTP/1.1" 404 174 - - - 0ms

I see the following messages on the splunkd log in the master. 

12-25-2020 00:37:54.055 +0000 WARN GetBundleListTransaction - Server xxxxx-1001264746-1-1088387397[https://10.236.9.46:8089/services/admin/bundles/xxxxx-1001264746-3-1088390176] does not support bundle version listing. Probably an older version. Giving up due to error code 404.
12-25-2020 00:37:54.055 +0000 WARN DistributedPeer - Peer:https://10.236.9.46:8089 Unable to get bundle list
12-25-2020 00:37:54.056 +0000 WARN DistributedPeerManager - Cannot determine a latest common bundle, search may be blocked
12-25-2020 00:37:54.056 +0000 WARN GetBundleListTransaction - Server xxxxx-1001264746-2-1088388970[https://10.236.9.48:8089/services/admin/bundles/xxxxx-1001264746-3-1088390176] does not support bundle version listing. Probably an older version. Giving up due to error code 404.
12-25-2020 00:37:54.056 +0000 WARN DistributedPeer - Peer:https://10.236.9.48:8089 Unable to get bundle list
12-25-2020 00:37:54.057 +0000 WARN DistributedPeerManager - Cannot determine a latest common bundle, search may be blocked

Has someone seen or faced this issue before. Any help is much appreciated.

Thanks.

Labels (3)
0 Karma

venugoski
Explorer

Hi @govindashwin8  did you find resolution for the issue? 

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

May 2026 Splunk Expert Sessions: Security & Observability

Level Up Your Operations: May 2026 Splunk Expert Sessions Whether you are refining your security posture or ...

Network to App: Observability Unlocked [May & June Series]

In today’s digital landscape, your environment is no longer confined to the data center. It spans complex ...

SPL2 Deep Dives, AppDynamics Integrations, SAML Made Simple and Much More on Splunk ...

Splunk Lantern is Splunk’s customer success center that provides practical guidance from Splunk experts on key ...