Knowledge Management

Failed connections from indexer to search head for mrsparkle/root.py

robnewman666
Path Finder

I have read the explanation on the mrsparkle dir via Solved: So I get the obvious Simpsons reference but what a... - Splunk Community

but I am seeing a lot of instances of failed connections from the indexer to the search head via port 8000 trying to initiate a connection with it. 

Firstly - should this be trying to connect from the indexer to the search head, and if so, is it still valid that this is required?

Then - why would that be failing if there are already connections from the indexer to the search head via 8000?

 

 

0 Karma
Get Updates on the Splunk Community!

Accelerating Observability as Code with the Splunk AI Assistant

We’ve seen in previous posts what Observability as Code (OaC) is and how it’s now essential for managing ...

Integrating Splunk Search API and Quarto to Create Reproducible Investigation ...

 Splunk is More Than Just the Web Console For Digital Forensics and Incident Response (DFIR) practitioners, ...

Congratulations to the 2025-2026 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...