先说问题:in seach head server:
splunk show kvstore-status, 显示有search head node 是down 和recovering:
abc.com:8191
configVersion : 95
hostAndPort : bbb.com:8191
lastHeartbeat : Mon May 23 17:17:15 2022
lastHeartbeatRecv : Mon May 23 17:17:16 2022
lastHeartbeatRecvSec : 1653351436.052
lastHeartbeatSec : 1653351435.069
optimeDate : Fri Dec 10 17:41:20 2021
optimeDateSec : 1639186880
pingMs : 25
replicationStatus : Recovering
uptime : 1270601
aaa.com:8191
configVersion : -1
hostAndPort : aaa.com:8191