Splunk Enterprise

Health Check issue- How to fix this error?

Santosh2
Path Finder

Hi,

when i am checking the health check dashboard i saw  error in indexing ready.

Indexing Ready
Root Cause: Cluster is not indexing ready, please bring up at least RF number of peers.
Unhealthy Instance: xxxxx
Last 50 related messages: None

Note: the instance is not active instance.

But when i check SF and RF are met it is showing

 

How to resolve this issue????

Labels (2)
Tags (1)
0 Karma

isoutamo
SplunkTrust
SplunkTrust

Hi

this message told that you haven't have enough indexers up and running. E.g. if your RF=3 and you have only 2 indexers up it cannot fulfil requirement of 3 separate version of data. This has fixed when you have enough indexers up to fulfil your SF & RF and if you have multisite cluster also site_search_factor and site_replication_factor.

r. Ismo

Get Updates on the Splunk Community!

Index This | What gets bigger the more you remove?

June 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with this month’s ...

Introducing the 2024 Splunk MVPs!

We are excited to announce the 2024 cohort of the Splunk MVP program. Splunk MVPs are passionate members of ...

Thanks for the Memories! Splunk University, .conf24, and Community Connections

Thank you to everyone in the Splunk Community who joined us for .conf24 – starting with Splunk University and ...