topic Re: In handler 'distsearch-peer': Status 401 while sending public key to search peer in Security https://community.splunk.com/t5/Security/In-handler-distsearch-peer-Status-401-while-sending-public-key/m-p/68155#M13974 <P>My guess from the 401 Unauthorized message is that either you have the wrong user/pass.</P> Wed, 20 Mar 2013 18:24:27 GMT araitz 2013-03-20T18:24:27Z In handler 'distsearch-peer': Status 401 while sending public key to search peer https://community.splunk.com/t5/Security/In-handler-distsearch-peer-Status-401-while-sending-public-key/m-p/68154#M13973 <P>Search head is Linux and search peer is Windows Server 2008. Using the web interface Splunk Manager to connect to search peer using a local account (on the Windows machine) with admin rights. Has worked in the past... Title of this is the error message returned. What am I missing? </P> Wed, 20 Mar 2013 17:05:12 GMT https://community.splunk.com/t5/Security/In-handler-distsearch-peer-Status-401-while-sending-public-key/m-p/68154#M13973 kwclark 2013-03-20T17:05:12Z Re: In handler 'distsearch-peer': Status 401 while sending public key to search peer https://community.splunk.com/t5/Security/In-handler-distsearch-peer-Status-401-while-sending-public-key/m-p/68155#M13974 <P>My guess from the 401 Unauthorized message is that either you have the wrong user/pass.</P> Wed, 20 Mar 2013 18:24:27 GMT https://community.splunk.com/t5/Security/In-handler-distsearch-peer-Status-401-while-sending-public-key/m-p/68155#M13974 araitz 2013-03-20T18:24:27Z Re: In handler 'distsearch-peer': Status 401 while sending public key to search peer https://community.splunk.com/t5/Security/In-handler-distsearch-peer-Status-401-while-sending-public-key/m-p/68156#M13975 <P>Possibly, but I have tried domain admin account as well as a local admin account. Also added account to Splunk. </P> <P>M$ Firewall is turned off (for now). Can ping system.</P> Thu, 21 Mar 2013 15:13:06 GMT https://community.splunk.com/t5/Security/In-handler-distsearch-peer-Status-401-while-sending-public-key/m-p/68156#M13975 kwclark 2013-03-21T15:13:06Z Re: In handler 'distsearch-peer': Status 401 while sending public key to search peer https://community.splunk.com/t5/Security/In-handler-distsearch-peer-Status-401-while-sending-public-key/m-p/68157#M13976 <P>If you look in the remote $SPLUNK_HOME/var/log/splunk/splunkd_access.log around the time of the failure, do you see the 401 unauthorized there? Have you migrated these systems or otherwise changed the certificates of these splunk instances?</P> Mon, 28 Sep 2020 13:34:33 GMT https://community.splunk.com/t5/Security/In-handler-distsearch-peer-Status-401-while-sending-public-key/m-p/68157#M13976 araitz 2020-09-28T13:34:33Z