When adding or rejoining a member to a search head cluster, the following error is displayed:
Error pulling configurations from the search head cluster captain; consider performing a destructive configuration resync on this search head cluster member.
What corrective action should be taken?
The correct action to resolve the error of pulling configurations from the search head cluster captain, and to perform a destructive configuration resync, is to run the splunk resync shcluster-replicated-config command on this member. This command ensures that the member downloads and applies the entire configuration tarball, addressing the inability to update its configuration through the configuration change delta.
D https://community.splunk.com/t5/Deployment-Architecture/How-to-resolve-error-quot-Error-pulling-configurations-from-the/m-p/354231
D is the correct answer
D is correct
Error pulling configurations from the search head cluster captain; consider performing a destructive configuration resync on this search head cluster member. The message also appears in the member's splunkd.logfile. If this message appears, it means that the member is unable to update its configuration through the configuration change delta and must apply the entire configuration tarball. It does not do this automatically. Instead, it waits for your intervention. You must then initiate the process of downloading and applying the tarball by running this CLI command on the member: splunk resync shcluster-replicated-config
this is the way
Answer is D. See Clustering slides 196 and 205. Also: https://docs.splunk.com/Documentation/Splunk/latest/DistSearch/HowconfrepoworksinSHC
D, page 196 Cluster admin
https://docs.splunk.com/Documentation/Splunk/latest/DistSearch/HowconfrepoworksinSHC#Perform_a_manual_resync
D is the correct