Splunk Search

Search peers / Replication status / Initial

Explorer

I'm trying to setup a distributed search. I have successfully added my search peers to the search head already.

The issue I have is when I use the web interface of Splunk, for the search head, I see that a few of my search peers have the (Replication status) of (Initial). I am not sure how to get these to have the status of (Successful).

To view my search peers, I went to the following location:

Manager > Distributed search > Search peers

Does anyone have an idea of I still need to do in order to get these statuses to change?

Explorer

Restarting Splunk solved this issue. I'm not sure why my other search peers had a successful status right away.

Splunk Employee
Splunk Employee

Need more information. Is there any information in splunkd.log about peer replication? Are there any errors indication a connection or authentication problem?

0 Karma