Why won't search head join the cluster?

[charival]

Hi, Greetings

I'm trying to add a search heads to an existing cluster by updating the server.conf file.

To be more specific I'm adding three search head.

One search head added successfully, but when I repeat the same steps in other two search heads. It doesn't joins the cluster.

I see the below is the sout when Splunk is restarted.

Checking prerequisites...
Checking http port [8000]: open
Checking mgmt port [8089]: open
Checking appserver port [127.0.0.1:8065]: open
Checking kvstore port [8191]: open
Checking configuration... Done.
Checking critical directories... Done
Checking indexes...
Validated: _audit _internal _introspection _telemetry _thefishbucket history main summary
Done

Bypassing local license checks since this instance is configured with a remote license master.

Checking filesystem compatibility... Done
Checking conf files for problems...
Done
Checking default conf files for edits...
Validating installed files against hashes from '/opt/splunk/splunk-7.1.1-8f0ead9ec3db-linux-2.6-x86_64-manifest'
All installed files intact.
Done
Checking replication_port port [8090]: open
All preliminary checks passed.

Starting splunk server daemon (splunkd)...
Done
[ OK ]

Waiting for web server at http://127.0.0.1:8000 to be available...........

WARNING: web interface does not seem to be available!

Please advise.

Thanks,

CG

[PaulPanther]

@charival based on your output I can see that you're running Splunk Enterprise on that instance with a outdated version (7.1.1) that  is no longer supported as of October 31, 2020.

Please verify if all other searchheads in your cluster are running on the same version. Maybe you have some compatibility issues. 

If the other peers are running on a higher version upgrade the affected instance and then try to add it again.