Splunk Enterprise

Regarding my search head cluster

satyaallaparthi
Communicator

Hello,

I have 2 search heads (sh), 2 indexers, 1 heavy forwarder, and 1 deployment in my environment.

The deployment is acting as a cluster master for SH and indexer and SH1 is acting as a captain.
But I got a problem now with that.. SH 1, that is SH captain replication status, is showing initial, and SH member replication status is showing successful. I tried a lot but didn’t get successful results.

Can anyone help me with that? Thanks in advance.

Splunk Version 7.1.1

Tags (2)
0 Karma
1 Solution

jkat54
SplunkTrust
SplunkTrust

You need at minimum 3 search heads to elect a captain. Because you only have 2, that is your problem. Add another search head and the issue will go away.

View solution in original post

0 Karma

jkat54
SplunkTrust
SplunkTrust

You need at minimum 3 search heads to elect a captain. Because you only have 2, that is your problem. Add another search head and the issue will go away.

0 Karma
Get Updates on the Splunk Community!

.conf25 technical session recap of Observability for Gen AI: Monitoring LLM ...

If you’re unfamiliar, .conf is Splunk’s premier event where the Splunk community, customers, partners, and ...

A Season of Skills: New Splunk Courses to Light Up Your Learning Journey

There’s something special about this time of year—maybe it’s the glow of the holidays, maybe it’s the ...

Announcing the Migration of the Splunk Add-on for Microsoft Azure Inputs to ...

Announcing the Migration of the Splunk Add-on for Microsoft Azure Inputs to Officially Supported Splunk ...