We have disabled [distributedSearch] in out splunk cluster's master and indexer nodes. With this we are seeing below issues
WARN in Master:
WARN DistributedPeerManager - Cannot determine a latest common bundle, search may be blocked
ERROR in Indexers:
SearchPeerBundlesSetup - Cannot find bundles for search peer: <master_ip_node>
What we tried?
So the solution seems to be enabling dist search on master. But wanted to get more insight into this.