I have a simple question in mind.
I know that the communication between splunk instances is partly per default encrypted and the cluster communication is not. At least not per default.
Is there a splunk recommendation to leave it unencrypted?
Are there existing recommendations for intra Index Cluster and intra Search Head Cluster communication?
What options are there actually?