Splunk Enterprise

Search head bundle replication failed due to 409 http conflict when upgrade to 8.2.1

linhmai_bne
Path Finder

Hi.

I am upgrading from 8.1.0 to 8.2.1. I received the bundle replication issue as below:

Problem replicating config (bundle) to search peer ' 10.150.x.x:8089 ', Upload bundle="/opt/splunk/var/run/SHD01-1625054310.bundle" to peer name=IND01 uri=https://10.150.x.x:8089 failed; http_status=409 http_description="Conflict".

I received an error for each member of indexer cluster. My search head is a standalone server.

Could anyone please help?

Linh

Labels (1)
0 Karma
1 Solution

codebuilder
SplunkTrust
SplunkTrust

Make sure your search head is actually tied to the indexers.
If you run the following you should get back a list of all the indexers in your cluster.

|tstats count where index=* by splunk_server


Bundle failure can also occur if all your $SPLUNK_HOME directories are not owned by the splunk user.

Using a chown -RP splunk:splunk never hurts (assuming your Splunk user is "splunk".

 

----
An upvote would be appreciated and Accept Solution if it helps!

View solution in original post

0 Karma

codebuilder
SplunkTrust
SplunkTrust

Make sure your search head is actually tied to the indexers.
If you run the following you should get back a list of all the indexers in your cluster.

|tstats count where index=* by splunk_server


Bundle failure can also occur if all your $SPLUNK_HOME directories are not owned by the splunk user.

Using a chown -RP splunk:splunk never hurts (assuming your Splunk user is "splunk".

 

----
An upvote would be appreciated and Accept Solution if it helps!
0 Karma

ambrosesuen
Loves-to-Learn

I'm facing the same issue for version 8.2.1, but instead of upgrade, I just received this error suddenly.

 

It is there any solution to this problem? 

0 Karma

robert_miller
Path Finder

@ambrosesuenDid you ever figure this out?

0 Karma
Get Updates on the Splunk Community!

Index This | I am a number, but when you add ‘G’ to me, I go away. What number am I?

March 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...

What’s New in Splunk App for PCI Compliance 5.3.1?

The Splunk App for PCI Compliance allows customers to extend the power of their existing Splunk solution with ...

Extending Observability Content to Splunk Cloud

Register to join us !   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to ...