I have read the explanation on the mrsparkle dir via Solved: So I get the obvious Simpsons reference but what a... - Splunk Community
but I am seeing a lot of instances of failed connections from the indexer to the search head via port 8000 trying to initiate a connection with it.
Firstly - should this be trying to connect from the indexer to the search head, and if so, is it still valid that this is required?
Then - why would that be failing if there are already connections from the indexer to the search head via 8000?