https://community.splunk.com/t5/Security/Indexer-Clustering-and-Block-Signing/m-p/170492#M5014 <P>I am interested in Block Signing of events as described here : <A href="http://docs.splunk.com/Documentation/Splunk/6.1.1/Security/ITDataSigning">http://docs.splunk.com/Documentation/Splunk/6.1.1/Security/ITDataSigning</A></P> <P>Does this work with an Indexer Cluster?</P> Mon, 19 May 2014 20:09:23 GMT muebel 2014-05-19T20:09:23Z https://community.splunk.com/t5/Security/Indexer-Clustering-and-Block-Signing/m-p/170492#M5014 <P>I am interested in Block Signing of events as described here : <A href="http://docs.splunk.com/Documentation/Splunk/6.1.1/Security/ITDataSigning">http://docs.splunk.com/Documentation/Splunk/6.1.1/Security/ITDataSigning</A></P> <P>Does this work with an Indexer Cluster?</P> Mon, 19 May 2014 20:09:23 GMT https://community.splunk.com/t5/Security/Indexer-Clustering-and-Block-Signing/m-p/170492#M5014 muebel 2014-05-19T20:09:23Z https://community.splunk.com/t5/Security/Indexer-Clustering-and-Block-Signing/m-p/170493#M5015 <P>Per documentation here:</P> <P><A href="http://docs.splunk.com/Documentation/Splunk/6.0.3/Security/ITDataSigning">http://docs.splunk.com/Documentation/Splunk/6.0.3/Security/ITDataSigning</A></P> <P>"Block signing is not supported for distributed search."</P> Mon, 19 May 2014 20:13:26 GMT https://community.splunk.com/t5/Security/Indexer-Clustering-and-Block-Signing/m-p/170493#M5015 bosburn_splunk 2014-05-19T20:13:26Z https://community.splunk.com/t5/Security/Indexer-Clustering-and-Block-Signing/m-p/170494#M5016 <P>and because Clustered Indexers implies distributed search (searching over each of the indexers in the cluster), block signing is not possible.</P> Mon, 19 May 2014 20:41:59 GMT https://community.splunk.com/t5/Security/Indexer-Clustering-and-Block-Signing/m-p/170494#M5016 muebel 2014-05-19T20:41:59Z