Hi , I am configuring a search head clustering with a deployer but ran in many issues:
as per the Splunk docs these are the steps I did :
first I set the search head deployer:
I have added a pass4symmkey on deployer under shcluster stanza
[general]
serverName = sh2
pass4SymmKey = $1$ir3GnxLQSyQCIHmqN+mx
[shclustering]
pass4SymmKey = $1$1WrJE7i8jQ+THZ0MWxYh
I kept this same key across all search heads on server.conf ([shclustering]
pass4SymmKey = $1$1WrJE7i8jQ+THZ0MWxYh)
setting up search head cluster:
I ran this command in all search heads (total 3):
./splunk init shcluster-config -auth admin:password -mgmt_uri "https://vvvvv:8089" -replication_port 8079 -replication_factor 3 -conf_deploy_fetch_url https:/// (deployer_ip_address):8089 -secret -shcluster_label
I run this command in all search heads (Total 3)
then I did restart.
Choosing captain:
after completing all the above steps I choose any one search head to make a captain;
then I run this command : ./splunk bootstrap shcluster-captain -servers_list "URI:8089". -autgh admin:password
but after running its saying ,
error=This node seems to have already joined another cluster with below members: 'https://xxxx:8089'. First remove the member from the old cluster. Then run 'splunk clean
raft' on the member to reuse it in a new cluster; server=https://xxxxx:8089, error=This node seems to have already joined another cluster with below members: 'https://xxxxx:8089'. First remove the me
mber from the old cluster. Then run 'splunk clean raft' on the member to reuse it in a new cluster.
I am not clear why I am getting this error first time I am setting on these new servers , when I am running to make a captain getting this error. Please help me
2) And what the difference between general pass4symmkey and shcluster pass4symmkey , my pass4symmkey the shclustering one is same across all cluster members not the pass4symmkey which is under general stanza , which one should need to same across all search heads ?
Thanks
↧