Splunk Enterprise

splunk add shcluster-member

Ishwarya2806
Loves-to-Learn

used splunk remove shcluster-member and removed an existing cluster , then after the serachhead restart tried to add it back, but got below error . please let me know how to add them back 

 

/splunk add shcluster-member -current_member_uri https://<ip-xxx>:<9089>

In handler 'shclustermemberconsensus': Search Head Clustering is not enabled on this node. REST endpoint is not available

 

0 Karma

Ishwarya2806
Loves-to-Learn

can i run below command in order to fix the issue ? is it safe to run it ? cos mine was an existing searching , i removed it and trying to add them back 

splunk clean all 

 

0 Karma

isoutamo
SplunkTrust
SplunkTrust
You cannot add node, which have already be a part of SHC. You must first “install” it from scratch. That is described on docs.
0 Karma

Ishwarya2806
Loves-to-Learn

when i try to run from searchead i get the below error 

/opt/app/ecomm/splunksearchhead/bin

./splunk add shcluster-member -current_member_uri https://<ip>:9089 

In handler 'shclustermemberconsensus': Node lonrsxxx-searchhead is not part of a cluster and cannot handle proxied calls. This may be because current_member_uri is not pointing to an existing cluster member. Run 'splunk help add shcluster-member' for more info.

0 Karma
Get Updates on the Splunk Community!

Splunk Mobile: Your Brand-New Home Screen

Meet Your New Mobile Hub  Hello Splunk Community!  Staying connected to your data—no matter where you are—is ...

Introducing Value Insights (Beta): Understand the Business Impact your organization ...

Real progress on your strategic priorities starts with knowing the business outcomes your teams are delivering ...

Enterprise Security (ES) Essentials 8.3 is Now GA — Smarter Detections, Faster ...

As of today, Enterprise Security (ES) Essentials 8.3 is now generally available, helping SOC teams simplify ...