ExamGecko
Question list
Search
Search

List of questions

Search

Question 24 - SPLK-2002 discussion

Report
Export

When adding or rejoining a member to a search head cluster, the following error is displayed:

Error pulling configurations from the search head cluster captain; consider performing a destructive configuration resync on this search head cluster member.

What corrective action should be taken?

A.

Restart the search head.

Answers
A.

Restart the search head.

B.

Run the splunk apply shcluster-bundle command from the deployer.

Answers
B.

Run the splunk apply shcluster-bundle command from the deployer.

C.

Run the clean raft command on all members of the search head cluster.

Answers
C.

Run the clean raft command on all members of the search head cluster.

D.

Run the splunk resync shcluster-replicated-config command on this member.

Answers
D.

Run the splunk resync shcluster-replicated-config command on this member.

Suggested answer: D

Explanation:

When adding or rejoining a member to a search head cluster, and the following error is displayed: Error pulling configurations from the search head cluster captain; consider performing a destructive configuration resync on this search head cluster member.

The corrective action that should be taken is to run the splunk resync shcluster-replicated-config command on this member. This command will delete the existing configuration files on this member and replace them with the latest configuration files from the captain. This will ensure that the member has the same configuration as the rest of the cluster. Restarting the search head, running the splunk apply shcluster-bundle command from the deployer, or running the clean raft command on all members of the search head cluster are not the correct actions to take in this scenario. For more information, seeResolve configuration inconsistencies across cluster membersin the Splunk documentation.

asked 13/11/2024
Bobby Pick
35 questions
User
Your answer:
0 comments
Sorted by

Leave a comment first