Search head is Linux and search peer is Windows Server 2008. Using the web interface Splunk Manager to connect to search peer using a local account (on the Windows machine) with admin rights. Has worked in the past... Title of this is the error message returned. What am I missing?
If you look in the remote $SPLUNK_HOME/var/log/splunk/splunkd_access.log around the time of the failure, do you see the 401 unauthorized there? Have you migrated these systems or otherwise changed the certificates of these splunk instances?
