Splunk Enterprise Security

How to find root cause and solution for Unable to distribute to peer named xxxxxxxxxxxxx at uri= xxxxx

Path Finder

Unable to distribute to peer named xxxxxx at uri=xxxxxxxx:8089 using the uri-scheme=https because peer has status=2. Verify uri-scheme, connectivity to the search peer, that the search peer is up, and that an adequate level of system resources are available. See the Troubleshooting Manual for more information

0 Karma

Path Finder

First try whether the connectivity between the search head and indexer is active. You can test it by
telnet index_ip 8089

If it is talking two way, then it might me the system resources issue.

0 Karma