Splunk Enterprise

Search head bundle replication failed due to 409 http conflict when upgrade to 8.2.1

linhmai_bne
Path Finder

Hi.

I am upgrading from 8.1.0 to 8.2.1. I received the bundle replication issue as below:

Problem replicating config (bundle) to search peer ' 10.150.x.x:8089 ', Upload bundle="/opt/splunk/var/run/SHD01-1625054310.bundle" to peer name=IND01 uri=https://10.150.x.x:8089 failed; http_status=409 http_description="Conflict".

I received an error for each member of indexer cluster. My search head is a standalone server.

Could anyone please help?

Linh

Labels (1)
0 Karma
1 Solution

codebuilder
Influencer

Make sure your search head is actually tied to the indexers.
If you run the following you should get back a list of all the indexers in your cluster.

|tstats count where index=* by splunk_server


Bundle failure can also occur if all your $SPLUNK_HOME directories are not owned by the splunk user.

Using a chown -RP splunk:splunk never hurts (assuming your Splunk user is "splunk".

 

----
An upvote would be appreciated and Accept Solution if it helps!

View solution in original post

0 Karma

codebuilder
Influencer

Make sure your search head is actually tied to the indexers.
If you run the following you should get back a list of all the indexers in your cluster.

|tstats count where index=* by splunk_server


Bundle failure can also occur if all your $SPLUNK_HOME directories are not owned by the splunk user.

Using a chown -RP splunk:splunk never hurts (assuming your Splunk user is "splunk".

 

----
An upvote would be appreciated and Accept Solution if it helps!
0 Karma

ambrosesuen
Loves-to-Learn

I'm facing the same issue for version 8.2.1, but instead of upgrade, I just received this error suddenly.

 

It is there any solution to this problem? 

0 Karma

robert_miller
Path Finder

@ambrosesuenDid you ever figure this out?

0 Karma
Get Updates on the Splunk Community!

Webinar Recap | Revolutionizing IT Operations: The Transformative Power of AI and ML ...

The Transformative Power of AI and ML in Enhancing Observability   In the realm of IT operations, the ...

.conf24 | Registration Open!

Hello, hello! I come bearing good news: Registration for .conf24 is now open!   conf is Splunk’s rad annual ...

ICYMI - Check out the latest releases of Splunk Edge Processor

Splunk is pleased to announce the latest enhancements to Splunk Edge Processor.  HEC Receiver authorization ...