Getting Data In

Why am I getting an error telling me the Pass4SymmKey is wrong, preventing me from adding a new peer to an existing indexer cluster?

brent_weaver
Builder

I am in a sandbox playing with indexer cluster server management. My end goal is to play with and set up indexer discovery, but am stuck on trying to add a 3rd indexer peer to an existing 2 node indexer cluster. I have an Enterprise license with clustering available. I have my two indexer servers up and running great. I go to configure a third to bring into the fold and it tells me that the pass4Symkey is wrong, which I am about 99.99% sure it is not. I must be missing something about how to add a new peer to an existing established cluster.

Help, what am I missing?

0 Karma
1 Solution

brent_weaver
Builder

I figured out my problem, and its not the first time I overlooked something 🙂

When I built the Linux VM the firewall got installed and was therefore preventing a connection back to 8089... DoH 🙂

View solution in original post

brent_weaver
Builder

I figured out my problem, and its not the first time I overlooked something 🙂

When I built the Linux VM the firewall got installed and was therefore preventing a connection back to 8089... DoH 🙂

mmakar
New Member

How is this an accepted answer, there is no solution provided!!

0 Karma

richgalloway
SplunkTrust
SplunkTrust

The OP said his firewall was blocking connections to port 8089. Presumably, turning off the firewall or enabling port 8089 was the solution.

---
If this reply helps you, Karma would be appreciated.
0 Karma
Get Updates on the Splunk Community!

Enterprise Security Content Update (ESCU) | New Releases

In December, the Splunk Threat Research Team had 1 release of new security content via the Enterprise Security ...

Why am I not seeing the finding in Splunk Enterprise Security Analyst Queue?

(This is the first of a series of 2 blogs). Splunk Enterprise Security is a fantastic tool that offers robust ...

Index This | What are the 12 Days of Splunk-mas?

December 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...