https://community.splunk.com/t5/Getting-Data-In/Why-am-I-getting-quot-Error-while-sending-public-key-to-search/m-p/230898#M44944 <P>Check out the local instances splunkd.log. It's possible a universal forwarder can't be added as a search peer since its not capable of handling searches. Otherwise it could simply be a permissions issue since the user must be an admin on both systems.</P> Fri, 25 Mar 2016 13:57:57 GMT sloshburch 2016-03-25T13:57:57Z https://community.splunk.com/t5/Getting-Data-In/Why-am-I-getting-quot-Error-while-sending-public-key-to-search/m-p/230897#M44943 <P>I have a Splunk Server on Ubuntu and a Splunkforwarder on Ubuntu too. <BR /> I want to add splunkforwarder to distributed search on Splunk server, but when try to add it, the error below is generated: </P> <PRE><CODE>Encountered the following error while trying to save: In handler 'distsearch-peer': Error while sending public key to search peer: Connection reset by peer </CODE></PRE> <P>How do can I fix this problem?</P> Wed, 13 Jan 2016 07:24:04 GMT https://community.splunk.com/t5/Getting-Data-In/Why-am-I-getting-quot-Error-while-sending-public-key-to-search/m-p/230897#M44943 amirzargaran 2016-01-13T07:24:04Z https://community.splunk.com/t5/Getting-Data-In/Why-am-I-getting-quot-Error-while-sending-public-key-to-search/m-p/230898#M44944 <P>Check out the local instances splunkd.log. It's possible a universal forwarder can't be added as a search peer since its not capable of handling searches. Otherwise it could simply be a permissions issue since the user must be an admin on both systems.</P> Fri, 25 Mar 2016 13:57:57 GMT https://community.splunk.com/t5/Getting-Data-In/Why-am-I-getting-quot-Error-while-sending-public-key-to-search/m-p/230898#M44944 sloshburch 2016-03-25T13:57:57Z