I configured a search head cluster and configured a captain and added the searchheads to the indexer cluster. I now want to break the shcluster and have done this so far; All from the cli: removed the member that was not the captain, went ok Tried to remove the other member, didnt work the command just hanged for half an hour before I gave up and aborted it. Tried to set the captain in static mode, did a clean raft, but still no luck. configured disabled=1 in the shclustering part of the server.conf and this time it went ok I guess I now get the message this node is not a part of any cluster configuration.   Over to the indexer cluster where I now want to get rid of the searchheads from the GUI which is still showing up as up and running. ran the command splunk remove cluster-search-heads and that went successful but the searchheads are still there in the indexer clustering GUI some suggests that this will go away after a few minutes and after a restart of the manager node this will certainly go away. I have now waited a whole day and restarted, but they are still showing up and running with a green checkmark too. Where does it get its information from and how can I get rid of them? ... View more