Installation

How can I connect indexes to cluster?

domino30
Path Finder

So I have a vSphere environment.  our indexer machines are running rhel 8.7 and I installed splunk enterprise on all them.

We named them indx01, indx02 and indx03 real creative yep but with some googling we turning off distributed searching and disabled firewall just to be sure we initially had a success in adding peers to the index cluster master, but they were throwing an error that said unable to connect to the cluster master and so on the replication factor blah blah. So then we disabled indexer clustering on all of them and now I can't get any of them to be added.

Distributed search turned off check

firewall disabled   check

on the same domain and dns  check

I am attaching a image of a warning but I don't know what if anything it has to do with the problem

Labels (1)
0 Karma

isoutamo
SplunkTrust
SplunkTrust

Hi

have you followed instructions to create indexer cluster from docs?

At least you must add pass4symmkey for clustering when you are adding node to cluster. Without it, it cannot connect to cm and join to the cluster. Use the same key than you have defined o cm for clustering. It should be different than general pass4symmkey!

r. Ismo

0 Karma
Get Updates on the Splunk Community!

Enterprise Security Content Update (ESCU) | New Releases

In December, the Splunk Threat Research Team had 1 release of new security content via the Enterprise Security ...

Why am I not seeing the finding in Splunk Enterprise Security Analyst Queue?

(This is the first of a series of 2 blogs). Splunk Enterprise Security is a fantastic tool that offers robust ...

Index This | What are the 12 Days of Splunk-mas?

December 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...