@Lucas_K Please share the solution if you were able to solve this?  ... View more

Hi did I understood right, if I said, that you have 4 SH in SHC in your own AWS environment? 1st you should have odd number of SHs in SHC to get RAFT working correctly especially if you have those in several AZ/DC. To get majority after one (or more) node have gone down there must be more than 50% node left from original amount of nodes! If you couldn't found anything from splunkd.log then you should also look messages and use dmesg -T command to check that e.g. omkiller haven't kill those on OoM (out of memory) situation? Also check what you have in your AWS CloudWatch etc. r. Ismo ... View more