In handler 'distsearch-peer': Status 401 while sending public key to search peer

[kwclark]

Search head is Linux and search peer is Windows Server 2008. Using the web interface Splunk Manager to connect to search peer using a local account (on the Windows machine) with admin rights. Has worked in the past... Title of this is the error message returned. What am I missing?

[araitz]

My guess from the 401 Unauthorized message is that either you have the wrong user/pass.

[araitz]

If you look in the remote $SPLUNK_HOME/var/log/splunk/splunkd_access.log around the time of the failure, do you see the 401 unauthorized there? Have you migrated these systems or otherwise changed the certificates of these splunk instances?

[kwclark]

Possibly, but I have tried domain admin account as well as a local admin account. Also added account to Splunk.

M$ Firewall is turned off (for now). Can ping system.