Dashboards & Visualizations

How to fix my Search Head Cluster when SH members are not in sync?

paculver
New Member

Just created a Search Head Cluster with 3 nodes and a deployer. Deployer and 2 of 3 SHC members are in sync, but one isn't. I have reissued the deploy command but issue persists. A dashboard is fine with 2 of 3 search heads but 1 fails to display anything...for just a few dashboards. Why? And how do I fix this?

0 Karma

somesoni2
Revered Legend

Try running following command on the member which is out of sync.

$SPLUNK_HOME/bin/splunk resync shcluster-replicated-config
Get Updates on the Splunk Community!

Stay Connected: Your Guide to May Tech Talks, Office Hours, and Webinars!

Take a look below to explore our upcoming Community Office Hours, Tech Talks, and Webinars this month. This ...

They're back! Join the SplunkTrust and MVP at .conf24

With our highly anticipated annual conference, .conf, comes the fez-wearers you can trust! The SplunkTrust, as ...

Enterprise Security Content Update (ESCU) | New Releases

Last month, the Splunk Threat Research Team had two releases of new security content via the Enterprise ...