Are you a member of the Splunk Community?
- Find Answers
- :
- Splunk Administration
- :
- Deployment Architecture
- :
- What is the value of pass4symmkey on searchhead me...
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark Topic
- Subscribe to Topic
- Mute Topic
- Printer Friendly Page
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hi , I want to understand when SHC is enabled , does the cluster members ( /opt/apps/splunk/etc/system/local/server.conf)
[shclustering]
conf_deploy_fetch_url = https://xxxxx:8089
disabled = 0
mgmt_uri = https://xxxxxx:8089
pass4SymmKey = $7$iExLu2lY4pfhmcXKg0bzvFrlGBiiz8ZsgeNOw8V/eggWX/UHplXMSX4=
Does this pass4Symmkey encrypted same on cluster members ? I am seeing different pass4Symmkey on other member . Is that a problem ?
[shclustering]
conf_deploy_fetch_url = https://xxxx:8089
disabled = 0
mgmt_uri = https://xxxxx:8089
pass4SymmKey = $7$ILXF6T0d2rhloLGdszMDKaL/H002O09I4zidU0PzN9aglnG5+wSnoWM=
shcluster_label = shcluster1
id = 2FCF8358-15EC-4F17-A119-63A6CEE4734C
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
The hashing algorithm is different between versions, but the short answer is yes, the hashed value can be different between cluster members. Always use the plain text version when adding new members, don't copy the hashed value from another member. As long as your SHC shows healthy you are good.
An upvote would be appreciated and Accept Solution if it helps!
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
The hashing algorithm is different between versions, but the short answer is yes, the hashed value can be different between cluster members. Always use the plain text version when adding new members, don't copy the hashed value from another member. As long as your SHC shows healthy you are good.
An upvote would be appreciated and Accept Solution if it helps!
Leveraging Automated Threat Analysis Across the Splunk Ecosystem
Can’t Make It to Boston? Stream .conf25 and Learn with Haya Husain
Splunk Lantern’s Guide to The Most Popular .conf25 Sessions
