A have ten machines in cluster, which were update according to manual (docs.splunk.com/Documentation/Splunk/6.0/Indexer/Upgradeacluster) . Everything seems to be fine (indexes and peers are in 'searchable' state), but when I'm trying to performe search from search-head, I recieve:
Unable to distribute to peer named hostname at uri hostname.net:8089 because peer has status = "Peer member of cluster and in distsearch.conf".
What does it mean ?
I've just figured out that root of problem was in file
/opt/splunk/etc/system/local/distsearch.conf:
[distributedSearch]
servers = a-3:8089,
a-4:8089,
a-2:8089,
b-2:8089,
b-3:8089,
b-4:8089,
b-0:8089,
a-0:8089,
a-1:8089,
b-1:8089
disabled = 0
removedTimedOutServers = 1
Which was inherited from before-clustering ages.
After I've set
disabled = 1
Error messages gone.