Notable info could not be obtained: : unidentified in content management adaptive response actions?

[bhsakarchourasi]

Hi All,

we have newly installed ES cluster where we cannot see the any action populating in adaptive response. We tried installing ES on stand alone server it works fine. Below is the error we are getting. Splunk version is 8.2 and ES 7.0.2.

Thanks in advance

[bhsakarchourasi]

Upgraded the ES version to 7.1 but still facing same issue, any reference would be very helpful.

Thanks.

[bhsakarchourasi · Accepted solution]

The issue was related to KV store, while troubleshooting we found that the KV store status of starting hence we checked whether the cluster members are able to communicate to each other on KV port. Enabling the KV store port between all the cluster member resolved the issue.