About boydtc

boydtc · ‎01-09-2023

Hmm ok, so we were able to resolve the part of the deployment server but now getting this error: Error in Indexer Discovery communication. Verify that the pass4SymmKey set under [indexer_discovery:primary_indexers] in 'outputs.conf' matches the same setting under [indexer_discovery] in 'server.conf' on the cluster manager. [uri=cluster_manager_server:8089/services/indexer_discovery http_code=502 http_response="Error connecting: SSL not configured on client"] I have already ensured the pass4symmkey was set but our web gives us the same message on our server when logging in the web: Proxy Error The proxy server received an invalid response from an upstream server. The proxy server could not handle the request GET Reason: Error reading from remote server Another list of error(s) was on the search head as well. It seems that however we updated from version 9.0.0 to 9.0.3 caused a misconfiguration maybe? Failed to contact license manager: reason='Unable to connect to license managerlicense_manager_server:8089 Error connecting: Connection refused', first failure time=1672749015 (Tue Jan 3 07:30:15 2023 EST). And: restricting search to internal indexes only (reason: [DISABLED_DUE_TO_GRACE_PERIOD,0]) It's just a connection issue between our cluster manager server and deployment server. Thank you

boydtc · ‎01-04-2023

@gcusello I am sorry, it is the deployment server with the issue.

boydtc · ‎01-04-2023

Good day all, I am having some issues after upgrading from Splunk Enterprise version 9.0.0 to 9.0.3. When log in to the deployment server and go to forwarder management, none of my data sources were listed and page was all blank white with nothing on there. I ensured the deployment server was enabled, checked firewalls which were ok, restarted Splunk and ensured Splunk was running which it was. No I am unable to log into the deployment server at all and gives the following errors and messages below: Failed to contact license manager: reason='Unable to connect to license manager=https://hostname:8089 Error connecting: Connection refused'

boydtc · ‎07-07-2022

Good day, We have an issue where when we try to setup email notifications with our email server with Splunk, no emails will send to the respective email addresses. We tried adding the adding the information: "ipaddress:port" to the mail host section but no luck. We do not require a username and password. We also tried following the instructions from the documentation here: https://docs.splunk.com/Documentation/Splunk/latest/SearchReference/Sendemail There was no luck there either. Is there an alternative way to setup email notifications through SSH or something else? This has to satisfy a STIG requirement. Please let me know if I need to provide additional information to the forum. Thank you

boydtc · ‎02-02-2022

Hi all, I have an issue here. I was trying to install apps through the deployment server and I noticed that the search head, cluster masters and indexers are missing on the deployment server forwarder management. The only server that's showing up is our heavy forwarder, I think they disappeared after the upgrade from 8.2.0 to 8.2.4. The heavy forwarder still has version 8.2.0 at the moment. I did a back-up before upgrading and tried to restore but it didn't work. Any assistance would be appreciated. Thank you

Posts	5
Solutions	0
Karma Given	0
Karma Received	0
Member Since	‎09-29-2021

Online Status	Offline
Date Last Visited	‎07-20-2023 07:58 AM

Unable to log in to Deployment Server after upgrad...

How to do Splunk Email Configuration?

Splunk Servers Missing on Deployment Servers

Re: License Manager Server

Re: License Manager Server

Unable to log in to Deployment Server after upgrad...

How to do Splunk Email Configuration?

Splunk Servers Missing on Deployment Servers