I have a problem with my distributed environment where some of my instances appear greyed out under CPU and memory utilization. If I open the specific instance panels I see the red icon with the errors below.
This is very strange because it affects the indexers only. The only difference with them is that the web service is disabled a per Splunk best practices.
I tried with splunk support by opening a case but we couldn't find the solution yet.
Splunk Version: 8.0.3 (indexers), 8.0.5 (everything else)--- Is this a problem?
It talks about the indexer role, my Cluster Master is also "SHC Deployer" (Search Head Cluster Deployer), would this be the role I have to move? Its not an Indexer, I have 6 dedicated indexers and 5 dedicated search heads.