Splunk Search

Errors: Reached end-of-stream/Streamed search execute failed

esiroker
Engager

Running 4.2.4, these errors show up every once and a while when doing a search on a search head:

"Reached end-of-stream while waiting for more data from peer
<indexer>. Search results might be incomplete!"

"[<indexer>] Streamed search execute failed because: Attempted to
get current default indexes when no context was set"

<indexer> will be any one of our indexers.

Retrying the search works.

RicoSuave
Builder
0 Karma
Get Updates on the Splunk Community!

Index This | Forward, I’m heavy; backward, I’m not. What am I?

April 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...

A Guide To Cloud Migration Success

As enterprises’ rapid expansion to the cloud continues, IT leaders are continuously looking for ways to focus ...

Join Us for Splunk University and Get Your Bootcamp Game On!

If you know, you know! Splunk University is the vibe this summer so register today for bootcamps galore ...