Splunk Search

Can the Cluster Peer be re-added to the Cluster Master without restarting Cluster master or the Cluster Peer?

sat94541
Communicator

Can the Cluster Peer be re-added to the Cluster Master without restarting Cluster master or the Cluster Peer?
I have three Cluster Peers with RF=2 and SF=2. For some reason, one warm bucket of one of the indexes is not getting replicated to other peers. The data in the bucket is searchable.

0 Karma

rbal_splunk
Splunk Employee
Splunk Employee

Answer to your question is yes. In some rare condition it may be required that Cluster Peer may be re-added to the Cluster Peer. Usually this step should be done with Splunk Support Consult.
On re-add the existing cluster peer to cluster master you can issue curl command like below

 curl -k --basic -u admin:changeme -d clearMasks=false https://<peerIP>:<mgmtPort>/services/cluster/slave/control/control/re-add-peer

Where peerIP:mgmtPort refer to cluster peer that needs to be re-added.

ii) Or, other choice will be to run the following command on the Cluster Peer that needs to be re-added.

splunk _internal call  /services/cluster/slave/control/control/re-add-peer –method

Only situation I have found it to be useful is when due to some reason bucket state gets mismatched between Cluster Master and Cluster Peer. When Cluster Peer will join to the CM, it will report all buckets information to the Cluster master and that will clear mismatch status information on cluster master.

0 Karma
Get Updates on the Splunk Community!

What's new in Splunk Cloud Platform 9.1.2312?

Hi Splunky people! We are excited to share the newest updates in Splunk Cloud Platform 9.1.2312! Analysts can ...

What’s New in Splunk Security Essentials 3.8.0?

Splunk Security Essentials (SSE) is an app that can amplify the power of your existing Splunk Cloud Platform, ...

Let’s Get You Certified – Vegas-Style at .conf24

Are you ready to level up your Splunk game? Then, let’s get you certified live at .conf24 – our annual user ...