Splunk complains about "Data Durability" and "Data Searcheable" but I cannot identify the reason

[afx]

Hi,
I have been through the monitoring console, the logs and tried the health report.
Still no clue.
The only thing I see is an error with _audit in the indexer clustering status where _audit is the only index that shows up as not fully searchable.
Of course searching in _audit works.

Any ideas what to do with this?

thx
afx

[jacobpevans]

Can you post the error messages in their entirety?

[afx]

I see the following:
Data Durability

    Root Cause(s):
        Replication Factor is not met   
        Search Factor is not met    
    Last 50 related messages:
        09-16-2019 11:31:53.118 +0200 INFO CMMaster - event=commitGenerationFailure pendingGen=654 requesterReason=service failureReason='bucketNotCompletePrimality first unmet bid=_audit~92~BFA7B47D-C493-42FF-9EBF-73AFECFD0EF8'
        09-16-2019 11:26:53.758 +0200 INFO CMMaster - event=commitGenerationFailure pendingGen=654 requesterReason=service failureReason='bucketNotCompletePrimality first unmet bid=_audit~92~BFA7B47D-C493-42FF-9EBF-73AFECFD0EF8' 

and

Data Searchable

    Root Cause(s):
        All data is not searchable. Please ensure all the buckets have primary copies   
    Last 50 related messages:
        09-16-2019 11:31:53.118 +0200 INFO CMMaster - event=commitGenerationFailure pendingGen=654 requesterReason=service failureReason='bucketNotCompletePrimality first unmet bid=_audit~92~BFA7B47D-C493-42FF-9EBF-73AFECFD0EF8'
        09-16-2019 11:26:53.758 +0200 INFO CMMaster - event=commitGenerationFailure pendingGen=654 requesterReason=service 

thx
afx