argument uri is not supported by this handler splunk - Splunk Cloud

[michael_vi]

HI

I'm trying to run a search via CLI from federated Splunk instance > Splunk cloud.

Everything is configured correctly and I have access to all indexes that on Splunk Cloud from Federated Instance  via web interface

But when I'm trying to check connection via CLI on Federated Search instance

splunk display app -uri https://<splunk cloud uri>:8089

I get this error: 

argument uri is not supported by this handler splunk

Also, while trying to execute a search from Federated Search:

splunk search "index="some remote index on splunk cloud" | head 10"

I'm getting the following error:

ERROR: Unknown error for indexer: <splunk cloud>. Search results may be incomplete. If this occurs frequently , check on the peer.

Please assist 

[michael_vi]

An what about the other one...

My question is why remote search doesn't work

splunk search "index="some remote index on splunk cloud" | head 10"

I'm getting the following error:

ERROR: Unknown error for indexer: <splunk cloud>. Search results may be incomplete. If this occurs frequently , check on the peer.

[richgalloway]

Have you checked the search log or splunkd.log on the remote search head?

[richgalloway]

---

@michael_vi wrote:

I'm trying to run a search via CLI from federated Splunk instance > Splunk cloud.

Everything is configured correctly and I have access to all indexes that on Splunk Cloud from Federated Instance  via web interface

But when I'm trying to check connection via CLI on Federated Search instance

splunk display app -uri https://<splunk cloud uri>:8089

I get this error: 

argument uri is not supported by this handler splunk

That's because "-uri" is not an option to the display command.  Run splunk help display app to see the full syntax.