Moved to search head cluster but I receive error: "Please make sure that the pass4SymmKey setting in server.conf, under [general], is the same for the License Master and all its slaves"

[sbattista09]

Keep getting this error after moving to SH cluster,

Please make sure that the pass4SymmKey setting in server.conf, under [general], is the same for the License Master and all its slaves from ip='1.1.1.1' first failure time=1477268328 (Sun Oct 23 20:18:48 2016)

the key is the same for all of the servers, what else would cause this?

[lukejadamec · Accepted solution]

Are you aware of this Known Issue regarding the key in 6.4.4?
2014-07-29 SPL-87816 When implementing an indexer cluster or search head cluster, you cannot set pass4SymmKey in the general stanza. The system default values in the clustering and shclustering stanzas override any user-provided values in the general stanza.
Workaround: Set the value in the [clustering] or [shclustering] stanza, depending on the type of cluster you're implementing.

[lukejadamec]

Did this work? If not I can remove the answer so other folks will look at it.

[sbattista09]

sorry for the long delay. this worked after we added the pass4SymmKey attribute

[TStrauch]

Nice then just add the pass4SymmKey attribute to your [shclustering] stanza and/or to your [clustering] stanza and it should be fine.

[TStrauch]

Hi,

try to put in the pass4SymmKey in cleartext to all Splunk instances again. (SH,CM,IDX,LicenseMaster) and restart splunkd. There must be a discrepancy.

What Versions are your Splunk Instances running?

kind regards

[sbattista09]

6.4.4, we did this and we are still getting the error.