In an indexer clustering environment, is there a way to push out new ca.pem and cacert.pem files from the cluster master?

[svishnevskaya_s]

In an indexer clustering environment is there a way to push out new ca.pem and cacert.pem files from the cluster master?

Per $SPLUNK_HOME/etc/master-apps

[ppablo]

Hi @svishnevskaya_splunk

I noticed you upvoted @renjith.nair's answer which is great, but if it solved your issue, please be sure to resolve the post by clicking "Accept" directly below the answer. Thanks!

Patrick

[renjith_nair · Accepted solution]

• Create a small app with the cert files inside the master-apps.
• Create additional server.conf file and mention the certificate path under ssl stanza to the new files
• Apply cluster bundle and you should have the new certificates and server.conf file
• Refer here for config file precedence : http://docs.splunk.com/Documentation/Splunk/6.4.2/Admin/Wheretofindtheconfigurationfiles