So I have a vSphere environment. our indexer machines are running rhel 8.7 and I installed splunk enterprise on all them.
We named them indx01, indx02 and indx03 real creative yep but with some googling we turning off distributed searching and disabled firewall just to be sure we initially had a success in adding peers to the index cluster master, but they were throwing an error that said unable to connect to the cluster master and so on the replication factor blah blah. So then we disabled indexer clustering on all of them and now I can't get any of them to be added.
Distributed search turned off check
firewall disabled check
on the same domain and dns check
I am attaching a image of a warning but I don't know what if anything it has to do with the problem
Hi
have you followed instructions to create indexer cluster from docs?
At least you must add pass4symmkey for clustering when you are adding node to cluster. Without it, it cannot connect to cm and join to the cluster. Use the same key than you have defined o cm for clustering. It should be different than general pass4symmkey!
r. Ismo