Security

SSL Communication between Splunk Indexers and UF/HF

sankaraniyan1
Explorer

Hi All,

   I have a weird requirement here but maybe some expert help might be showered .

I have a set of 800+ agents distributed across 3 Data center ( 1 primary DC and 2 secondary DC) and  client expects us to use SSL communication between the Datacenter. I use a Heavy Forwarder ( HF) at those 2 secondary DC to do some custom monitoring .

I have the solution finalized, with Indexer cluster and SH  to be at Primary DC.  I am planning to use a single indexer cluster to receive data from all forwarders. Now I am looking at following query i have.

1) Can i have my Universal forwarders in the primary DC talk without SSL certificates, while communication from UF agents in other DC is with SSL ?

2) Can i have the UF's in secondary DC talk to the HF in secondary DC without SSL and Data from HF's forwarder to Indexer over SSL.

  Basically can I configure SSL and non SSL communication in a single set of Indexer cluster ?

 

SKR..

Labels (3)
0 Karma
Get Updates on the Splunk Community!

Data Management Digest – December 2025

Welcome to the December edition of Data Management Digest! As we continue our journey of data innovation, the ...

Index This | What is broken 80% of the time by February?

December 2025 Edition   Hayyy Splunk Education Enthusiasts and the Eternally Curious!    We’re back with this ...

Unlock Faster Time-to-Value on Edge and Ingest Processor with New SPL2 Pipeline ...

Hello Splunk Community,   We're thrilled to share an exciting update that will help you manage your data more ...