Hi I recently changed couple of SSL keys on my splunk web and indexer servers and after that I am getting authentication failure from both indexer server on port 8089 whenever I log on to web gui on splunk web server. And other thing is I verified that both of my indexer server including web server are up and running and port 8089 are open and I can telnet to it. I searched couple suggestions on splunk answer but I am still having the same issue, so I reverted back my changes to original keys but still I am getting same error whenever I log on to splunk web gui. Any suggestion or answers are welcome.
You probably need to go in and re-authenticate to your distributed search peers via Settings > Distributed environment > Distributed search > Search peers. If you see an authentication failed message, click on the failed hosts and enter a valid admin user and password.
Thank You, that worked. Both of my indexers are connected and syncing successfully.
Any ideas on how to re-authenticate from command line ?
Thanks in advance