Splunk Enterprise

Health Check issue- How to fix this error?

Santosh2
Path Finder

Hi,

when i am checking the health check dashboard i saw  error in indexing ready.

Indexing Ready
Root Cause: Cluster is not indexing ready, please bring up at least RF number of peers.
Unhealthy Instance: xxxxx
Last 50 related messages: None

Note: the instance is not active instance.

But when i check SF and RF are met it is showing

 

How to resolve this issue????

Labels (2)
Tags (1)
0 Karma

isoutamo
SplunkTrust
SplunkTrust

Hi

this message told that you haven't have enough indexers up and running. E.g. if your RF=3 and you have only 2 indexers up it cannot fulfil requirement of 3 separate version of data. This has fixed when you have enough indexers up to fulfil your SF & RF and if you have multisite cluster also site_search_factor and site_replication_factor.

r. Ismo

Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Make Your Machine Data AI-Ready in Splunk

Every team is getting ready for AI agents.   Thursday, November 12, 2026  |  11AM  PST / 2PM EST   ...

Splunk Asynchronous Forwarding Explained

Splunk asynchronous forwarding is often misunderstood as simply setting autoLBVolume. That is not quite right. ...

How to Monitor AI Agents with Splunk Agent Observability

Let’s say I’m running a travel planning AI app in production. A user asks for three concise hotel options in ...