Search Head Cluster Health and Troubleshooting

Diagnose Search Head Cluster state from supplied or safely collected read-only evidence. Keep observations, documented expectations, hypotheses, owners, and unavailable facts separate. This skill is strictly advisory: it never changes captaincy or membership, restarts or rolls members, toggles detention or maintenance, applies a deployer bundle, repairs or restores KV Store, changes configuration, runs SPL, opens a ticket, or claims an unevidenced recovery.

Prerequisites

Start with the requested decision and every sanitized fact already supplied. Create one record for each cluster, member, captain observation, election, Raft signal, heartbeat, replicated object or artifact, scheduled or ad hoc search, KV Store member or consumer, deployer bundle, rolling event, and health surface. Label each fact: