Below steps fixed the issue Stop the search head that has the stale KV store member. Run the command splunk clean kvstore --local. Restart the search head. This triggers the initial synchronization from other KV store members. Run the command splunk show kvstore-status to verify synchronization. ... View more

@baya151 ,  yes crate a copy of default/outputs.conf file into local/outputs.conf  ... View more