Steps Taken: 1. Installed Splunk Enterprise on all new servers. 2. Enabled clustering on the designated manager node. 3. Configured clustering on the new indexer, adding it as a peer node. 4. Enabled clustering and added the new server as a search head. After verifying that the newly added servers appeared on the manager node, I attempted to enable clustering on the existing standalone Splunk server and add it as a peer node. However, when I tried to restart the Splunk services, they wouldn't start. I had to remove the clustering stanza for the services to start successfully. I'm unsure where I went wrong or if I missed a step, but it seems that adding the standalone server to the newly created cluster prevents it from starting unless I remove the clustering stanza.
... View more