Trying to update my cluster bundle and keep getting this? yet splunkd seems to be running?
This command [POST /services/cluster/master/control/control/apply] needs splunkd to be up, and splunkd is down.
Any update on this, Hitting the same issue here. Have to restart splunk each time I attempt to apply cluster-bundle.
samlaw,
What does splunk status report? Were you able to access any REST endpoint (say https://hostname:mgmtPort/services/) via say the browser
splunkd is running (PID: 25929). splunk helpers are running (PIDs: 25930 2469 25991 26021 26023). splunkweb is running (PID: 26038).
Services page loads fine
What is the exact command you are trying to execute? I've found that bad syntax in a splunk command can cause this error.
