I have my cluster configuration built… my index master seems to be good, here is the config:
[clustering]
mode = master
multisite = true
available_sites = site1,site2,site3
site_replication_factor = origin:1,total:5
site_search_factor = origin:1,total:5
[license]
master_uri = https://host.domain.local:8089
[general]
pass4SymmKey = whatever
site = site3
The config on my indexers in each site looks like this:
[clustering]
master_uri = https://host.doman.local:8089]
mode = slave
[license]
master_uri = https://host.doman.local:8089
[general]
pass4SymmKey = whatever
serverName = localhost01
site = site3
Obviously with the site change appropriately…. now when I restart the slaves, splunk starts up normally until it gets to starting the web server, then I get this:
Waiting for web server at http://127.0.0.1:8000 to be available............................................................................................................................................................................................................................................................................................................
WARNING: web interface does not seem to be available!
and it’s done this on every slave, if I remove the cluster config, it starts no problem.
... View more