Hello, I faced the same issue, following are the troubleshooting steps has been followed. As ERROR=401 that unauthrized request is made from deployer to splunk SHC Go to the /splunk-home/etc/system/local/server.conf of all SH cluster member and deployer and change the following, keep the value the same. [shclustering] pass4SymmKey=<clear_text_string> Restart splunkd. /opt/splunk/bin/splunk apply shcluster-bundle --answer-yes -target https://xx.xx.xxx.xx:8089 -auth admin:xxxmxmxm hope @erw550 this will help to you.
... View more