Seeing refactor error message on peer nodes in one of three Splunk instances.

[riqbal]

We are Splunk partner.

I build one lab in our environment.
In that lab, I have three indexers, one cluster master, one heavy forwarder, and one search head.

I have some questions in my mind.

Initially, I configure index clustering with the above resources (3 indexers and one cluster master)

Two are integrated successfully, the third one is not integrating.
I am seeing refactor error message on peer nodes.

Please advise me on this.

[ssadanala1]

Yeah Thats because cluster is waiting for one more indexer to join , that is the reason you are seeing those message .

[riqbal]

I tried to join third peer but it is giving me key error.

[ansif]

Can you check your pass4symmkey attribute value.Make sure you are not copied junk character from any text editor.