https://community.splunk.com/t5/Splunk-Enterprise/Splunk-Security-Essentials-issues/m-p/652582#M16965 <P>You don't do that. As a rule, you install a clean SH and join it to the cluster. You don't fiddle around installing local apps. All config is supposed to be managed within the SHC.</P> Mon, 31 Jul 2023 19:44:07 GMT PickleRick 2023-07-31T19:44:07Z https://community.splunk.com/t5/Splunk-Enterprise/Splunk-Security-Essentials-issues/m-p/652562#M16963 <P>So we rebuilt out SHs aby completely blowing them out and started with a fresh 9.1.01 install.</P><P>Then just for kicks before making a SH&nbsp; Cluster I installed the Splunk Security Essentials on one of the SHs</P><P>and The app worked wonderfully but when I made it part of a cluster It gave&nbsp; errors I am attaching a snipits of both so you can see. Keep in mind that all that was changed was that I put the SH into&nbsp; a cluster and then got the errors.</P> Mon, 31 Jul 2023 16:10:11 GMT https://community.splunk.com/t5/Splunk-Enterprise/Splunk-Security-Essentials-issues/m-p/652562#M16963 domino30 2023-07-31T16:10:11Z https://community.splunk.com/t5/Splunk-Enterprise/Splunk-Security-Essentials-issues/m-p/652582#M16965 <P>You don't do that. As a rule, you install a clean SH and join it to the cluster. You don't fiddle around installing local apps. All config is supposed to be managed within the SHC.</P> Mon, 31 Jul 2023 19:44:07 GMT https://community.splunk.com/t5/Splunk-Enterprise/Splunk-Security-Essentials-issues/m-p/652582#M16965 PickleRick 2023-07-31T19:44:07Z