When adding or rejoining a member to a search head cluster, and the following error is displayed:

Error pulling configurations from the search head cluster captain; consider performing a destructive

configuration resync on this search head cluster member.

The corrective action that should be taken is to run the splunk resync shcluster-replicated-config

command on this member. This command will delete the existing configuration files on this member

and replace them with the latest configuration files from the captain. This will ensure that the

member has the same configuration as the rest of the cluster. Restarting the search head, running

the splunk apply shcluster-bundle command from the deployer, or running the clean raft command

on all members of the search head cluster are not the correct actions to take in this scenario. For

more information, see Resolve configuration inconsistencies across cluster members in the Splunk

documentation.