Deployment Architecture

certificated mismatch

dmlee
Communicator

Hi, I have one search head(ver 4.1.4) and two index servers(4.1.4) , when I do search , sometimes I got an error message "Unable to distribute to peer named splunk_index01 at url https://172.30.6.xxx:8089 because peer has status=Certificate Mismatch" , but sometimes it works fine (with no error message, and I can see search results correctlly )

All three servers have "enableSplunkSSL=false" (server.conf)

Any idea about it ? thanks.

Tags (1)
0 Karma

jrodman
Splunk Employee
Splunk Employee

Do you require disabling ssl? This configuration is vastly less tested.

If we produce this message for SSL-disabled systems, that is in and of itself a bug. We should work this problem with support.

dmlee
Communicator

Hi Jrodman,

yes , we set "enableSplunkSSL=false" (server.conf) to improve replication speed.

I will file a support case, thanks

0 Karma
Get Updates on the Splunk Community!

.conf25 Community Recap

Hello Splunkers, And just like that, .conf25 is in the books! What an incredible few days — full of learning, ...

Splunk App Developers | .conf25 Recap & What’s Next

If you stopped by the Builder Bar at .conf25 this year, thank you! The retro tech beer garden vibes were ...

Congratulations to the 2025-2026 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...