Deployment Architecture

Problem while trying to run status command for search head clustering

Sourabhv05
Communicator

When i am trying to execute search head status command "splunk show shcluster-status -auth admin:password" from command promt at one of my Search head, It just return back to console without showing any status.

I have admin rights at the servers. What can be the issue ? Why i am not able to see the status of my search head cluster

0 Karma

mahamed_splunk
Splunk Employee
Splunk Employee

Is it happening on only one of the nodes or on all nodes ?

One reason could be that this SH is not properly added to SHC and is not part of SHC, hence the status command doesn't return anything

0 Karma

Sourabhv05
Communicator

Hi mahamed_splunk,

I am able to run the initialize command but while creating a captain by running bootstrap command

splunk bootstrap shcluster-captain -servers_list ":,:,..."

I am getting error as "splunk does not recognize bootstrap command. Please check command or go to Splunk help".

Please let me know why this error occurs as in documentation this command is mentioned

0 Karma
Get Updates on the Splunk Community!

Stay Connected: Your Guide to May Tech Talks, Office Hours, and Webinars!

Take a look below to explore our upcoming Community Office Hours, Tech Talks, and Webinars this month. This ...

They're back! Join the SplunkTrust and MVP at .conf24

With our highly anticipated annual conference, .conf, comes the fez-wearers you can trust! The SplunkTrust, as ...

Enterprise Security Content Update (ESCU) | New Releases

Last month, the Splunk Threat Research Team had two releases of new security content via the Enterprise ...