Deployment Architecture

Getting "Error while fetching apps baseline on target=http://:8089: Network-layer error: Connection reset by peer'" trying to deploy apps to a search head cluster

jking81
Engager

I'm having an issue running the command:

splunk apply shcluster-bundle -target http://<cluster_captain>:8089

This yields the error:

Error while deploying apps to first member: ConfDeploymentException: Error while fetching apps baseline on target=http://<cluster_captain>:8089: Network-layer error: Connection reset by peer

After numerous attempts to change my pass4symkey under the shclustering stanza in my server.conf file, I'm still getting the same error. When we had originally set up the search head cluster, this worked properly, but I can't seem to find a way to debug this issue.

Adding the -debug flag gives the following:

(1ry) QUERYING: 'base_url:https://127.0.0.1:8089 auth_option:(null) relative_url:/services/apps/deploy command=POST'
In build_full_rest_url(): Composing URL from base=https://127.0.0.1:8089 + relative=/services/apps/deploy
In build_full_rest_url(): Composed URL=https://127.0.0.1:8089/services/apps/deploy
In make_simple_rest_call_online(): using_basic_auth=0
In make_simple_rest_call_online(): [Re-]Initialized HTTP request headers:
    <none>
In make_simple_rest_call_online(): HTTP request response_code=500
Online REST call to /services/apps/deploy returned -1
Error while deploying apps to first member: ConfDeploymentException: Error while fetching apps baseline on target=http://<cluster_captain>:8089: Network-layer error: Connection reset by peer

(1ry) FAILED: 'HTTP/1.1 500 Error while deploying apps to first member: ConfDeploymentException: Error while fetching apps baseline on target=http://<cluster_captain>:8089: Network-layer error: Connection reset by peer'

As I can restart all of my search heads in the cluster and it's able to reform a cluster, I don't believe this is a pass4symkey issue. Any suggestions what would cause this?

0 Karma

ridwanahmed
Path Finder

did you ever figure out the issue?

I've confirmed https, pass4symmkey is correct, cleaned all my SHC instances, still this.

0 Karma

493600
Explorer

I happened to get the same error. It was because i have used deployer instance instead of search head instance in the command ./splunk apply shcluster-bundle -target https://"Use search head instance here"

0 Karma

sborys
Explorer

Use https instead of http . Splunk uses its own certificates although you server may not have SSL.

kkrishnan_splun
Splunk Employee
Splunk Employee

Thank you ! This helped me.

0 Karma
Get Updates on the Splunk Community!

.conf24 | Registration Open!

Hello, hello! I come bearing good news: Registration for .conf24 is now open!   conf is Splunk’s rad annual ...

Splunk is officially part of Cisco

Revolutionizing how our customers build resilience across their entire digital footprint.   Splunk ...

Splunk APM & RUM | Planned Maintenance March 26 - March 28, 2024

There will be planned maintenance for Splunk APM and RUM between March 26, 2024 and March 28, 2024 as ...