We are Splunk partner.
I build one lab in our environment.In that lab, I have three indexers, one cluster master, one heavy forwarder, and one search head.
I have some questions in my mind.
Initially, I configure index clustering with the above resources (3 indexers and one cluster master)
Two are integrated successfully, the third one is not integrating.I am seeing refactor error message on peer nodes.
Please advise me on this.
Yeah Thats because cluster is waiting for one more indexer to join , that is the reason you are seeing those message .
I tried to join third peer but it is giving me key error.
Can you check your pass4symmkey attribute value.Make sure you are not copied junk character from any text editor.