I have a SH pool 6.1.3 and am seeing this error in the pyton_modular_input.log. I also have ES 3.1.1 installed. This error is affecting my ability to merge assets in to asset lookup list.
file=lookup_modinput.py:run:503 | status="exiting, not master host" msg=Not selecting this search head pool member as master host based on alphabetical ordering ({0}). To override, define master_host in inputs.conf.
Does anyone have a clue on how to resolve this issue or where to look?
Racking my brain on this one.
Thanks in advance.
Joe
As per the inputs.conf.spec in SA-ThreatIntelligence you'll want to set that master_host
setting in inputs.conf:
master_host = <string>
* [DEFAULT_STANZA_ONLY] Defines the master host if search head pooling is enabled.
* Only the master host will perform threat list downloads. If SHP is enabled this
* MUST be non-empty AND match the name of a server in the pool.
As per the inputs.conf.spec in SA-ThreatIntelligence you'll want to set that master_host
setting in inputs.conf:
master_host = <string>
* [DEFAULT_STANZA_ONLY] Defines the master host if search head pooling is enabled.
* Only the master host will perform threat list downloads. If SHP is enabled this
* MUST be non-empty AND match the name of a server in the pool.
Thanks Martin I will give this a shot!
Joe