Installation

Splunk Indexer Clustering Issues- How to resolve error [00000100]?

govindashwin8
Loves-to-Learn Lots

I am trying to set up an indexer cluster with one master, 2 indexers and a search head, using splunk enterprise version 7.2.3.
After configuring the master and the indexers I see the indexers as sick 

Error [00000100] Instance name "xxxxx-1001264746-1-1088387397" REST interface to peer is not responding. Check var/log/splunk/splunkd_access.log on the peer. 

On the access logs :-

10.236.9.173 - splunk-system-user [25/Dec/2020:00:46:54.047 +0000] "GET /services/admin/bundles/xxxxx-1001264746-3-1088390176?count=-1 HTTP/1.1" 404 174 - - - 0ms

I see the following messages on the splunkd log in the master. 

12-25-2020 00:37:54.055 +0000 WARN GetBundleListTransaction - Server xxxxx-1001264746-1-1088387397[https://10.236.9.46:8089/services/admin/bundles/xxxxx-1001264746-3-1088390176] does not support bundle version listing. Probably an older version. Giving up due to error code 404.
12-25-2020 00:37:54.055 +0000 WARN DistributedPeer - Peer:https://10.236.9.46:8089 Unable to get bundle list
12-25-2020 00:37:54.056 +0000 WARN DistributedPeerManager - Cannot determine a latest common bundle, search may be blocked
12-25-2020 00:37:54.056 +0000 WARN GetBundleListTransaction - Server xxxxx-1001264746-2-1088388970[https://10.236.9.48:8089/services/admin/bundles/xxxxx-1001264746-3-1088390176] does not support bundle version listing. Probably an older version. Giving up due to error code 404.
12-25-2020 00:37:54.056 +0000 WARN DistributedPeer - Peer:https://10.236.9.48:8089 Unable to get bundle list
12-25-2020 00:37:54.057 +0000 WARN DistributedPeerManager - Cannot determine a latest common bundle, search may be blocked

Has someone seen or faced this issue before. Any help is much appreciated.

Thanks.

Labels (3)
0 Karma

venugoski
Explorer

Hi @govindashwin8  did you find resolution for the issue? 

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

[Puzzles] Solve, Learn, Repeat: Matching cron expressions

This puzzle (first published here) is based on matching timestamps to cron expressions.All the timestamps ...

Design, Compete, Win: Submit Your Best Splunk Dashboards for a .conf26 Pass

Hello Splunkers,  We’re excited to kick off a Splunk Dashboard contest! We know that dashboards are a primary ...

May 2026 Splunk Expert Sessions: Security & Observability

Level Up Your Operations: May 2026 Splunk Expert Sessions Whether you are refining your security posture or ...