Indexer Clustering and Block Signing?

[muebel]

I am interested in Block Signing of events as described here : http://docs.splunk.com/Documentation/Splunk/6.1.1/Security/ITDataSigning

Does this work with an Indexer Cluster?

[bosburn_splunk · Accepted solution]

Per documentation here:

http://docs.splunk.com/Documentation/Splunk/6.0.3/Security/ITDataSigning

"Block signing is not supported for distributed search."

[muebel]

and because Clustered Indexers implies distributed search (searching over each of the indexers in the cluster), block signing is not possible.