Skip to main content
Solved

Leader Node Down Causes Worker Node Connection Break During Pull Sources

  • February 25, 2026
  • 4 replies
  • 4 views

This message originated from Cribl Community Slack.
Click here to view the original link.

Is Leader - Worker Node Communication required for doing Pull Sources? ie - If my Leader node goes down for an extended period of time, and I have Workers that all have Splunk Search Sources on a cron job....Is that connection supposed to break?

Best answer by Brandon McCombs

Depends on the pull source. Splunk Search is a collector job so yes it will be affected. All collector jobs are triggered for execution based on the schedule that the leader is tracking.

4 replies

Depends on the pull source. Splunk Search is a collector job so yes it will be affected. All collector jobs are triggered for execution based on the schedule that the leader is tracking.


Some pull-based (non-collector) sources also leverage the leader. https://docs.cribl.io/stream/sources/#pull-sources

Good to know. Appreciate the quick response.