Hello, I faced the same issue, following are the troubleshooting steps has been followed. As ERROR=401 that unauthrized request is made from deployer to splunk SHC Go to the /splunk-home/etc/system/local/server.conf of all SH cluster member and deployer and change the following, keep the value the same. [shclustering] pass4SymmKey=<clear_text_string> Restart splunkd. /opt/splunk/bin/splunk apply shcluster-bundle --answer-yes -target https://xx.xx.xxx.xx:8089 -auth admin:xxxmxmxm hope @erw550  this will help to you.   ... View more

Thanks for the response. It is working as expected  in our UAT as you mentioned ... View more