Hello,
I have an indexer node running Splunk Version 6.3.2 (build aaff59bb082c) that constantly outputs the following "WARN" to the "/apps/splunk/splunk/var/log/splunk/splunkd.log" log file:
CMSlave - handleHeartbeatDone: successful heartbeat and re-add not received but proxy is in disconnected state. Forcing re-add.
CMMessages - got genid thats invalid or out of range, setting to INVALID_GENID, jn=18446744073709551616.000000
In addition:
1. The same indexer node indexes the data pushed to it, and it is searchable in Splunk Web by browsing to http://{indexer_host}:8000
2. The same indexer node can't search data that was indexed into other indexers in the cluster. And the other Indexers can't search the data that was indexed on the the problematic node mentioned above.
Before the issue appeared, no configuration changes were done.
I'd be very grateful if anyone could provide assistance, explain what causing the above WARN messages, or just point me into the right direction to investigate the cause.
Thank you in advance,
Greg
... View more