Problem replicating config (bundle) to search peer

[splunkcol]

hi

can someone help me with this error message?

will it be because of this file and its size? can i delete it?

[thambisetty]

replicating 265 MB should not be a problem. 

can you check the connectivity of search peer in search head, settings -> Distributed search -> search peers.

is status healthy?

[splunkcol]

Hi,

It is fine but I have seen it several times in "failed" state

It's even intermittent between "Successful" and "failed"

@thambisetty  what do you think is the cause?

[splunkcol]

Sorry for the insistence, could someone give me recommendations? 😭

[isoutamo]

Did this happened regularly?

Which kind of environment you have?

Have you MC (monitoring console) in use so you could check what there happened.

r. Ismo

[splunkcol]

Did this happened regularly?
Yes

Which kind of environment you have?

2 Search Head
2 Indexers
2 Heavy Forwarder

I have access to the monitor, but there are several menus and submenu, which option should I check exactly?

Just as I investigated the problem is presented because the file called bundle is very heavy which causes the error message, my question at this time is if this bundle file can be debugged?

[isoutamo]

Hi

maybe these previous answers can help you:

• https://community.splunk.com/t5/Getting-Data-In/How-to-resolve-quot-Problem-replicating-config-bundl...
• https://community.splunk.com/t5/Splunk-Search/Why-am-I-getting-error-quot-problem-replicating-config...
• https://community.splunk.com/t5/Archive/Problem-replicating-config-bundle-to-search-peer/td-p/237763
• https://community.splunk.com/t5/Splunk-Search/Large-lookup-caused-the-bundle-replication-to-fail-Wha...
• https://community.splunk.com/t5/Deployment-Architecture/This-keeps-appearing-in-my-search-head-quot-...

Basically this could means that you have e.g. massive csv lookup file which you are trying to use within yor search and timeouts rises due that.

r. Ismo

[splunkcol]

hi @isoutamo 

I will read each thread and inform you.

Thank you