Splunk Search

Errors: Reached end-of-stream/Streamed search execute failed

esiroker
Engager

Running 4.2.4, these errors show up every once and a while when doing a search on a search head:

"Reached end-of-stream while waiting for more data from peer
<indexer>. Search results might be incomplete!"

"[<indexer>] Streamed search execute failed because: Attempted to
get current default indexes when no context was set"

<indexer> will be any one of our indexers.

Retrying the search works.

RicoSuave
Builder
0 Karma
Get Updates on the Splunk Community!

Video | Welcome Back to Smartness, Pedro

Remember Splunk Community member, Pedro Borges? If you tuned into Episode 2 of our Smartness interview series, ...

Detector Best Practices: Static Thresholds

Introduction In observability monitoring, static thresholds are used to monitor fixed, known values within ...

Expert Tips from Splunk Education, Observability in Action, Plus More New Articles on ...

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...