@ephremzw  When you installed normal Splunk installation KVstore will be enabled by default. If you are not using it you can disable it. I generally keep it running on any Splunk instance even though I'm not using it as far as it's not harming any policies.   ... View more

Hi @ephremzw  Where are you running this command are you running it one of the search heads or on the search head deployer ?  this needs to be executed on one the search head members  Just for try  Before executing the  bootsrap,  try to all the splunk shcluster members after they are up the try to initialize the execution ... View more