Splunk Enterprise Security

Check secure communication establish between search head and indexer

arun_kant_sharm
Path Finder

Hi Experts,

I am new in Splunk, especially in a Splunk distributed environment creation.
For enable SSL on splunkWeb , I modified the local copy of web.conf file ( https://docs.splunk.com/Documentation/Splunk/7.3.1/Admin/Webconf ), and its perfectly working fine.

But to establish secure communication between in Search Head and Indexer , I modified Input.conf file

https://docs.splunk.com/Documentation/Splunk/7.3.1/Security/ConfigureSplunkforwardingtousethedefault...

Is there any way to verify the communication between Indexers and search heads are secure?
(Using any CLI command or any other way) . I want to verify it before installing any splunk app.

0 Karma

lakshman239
Influencer

The communication between SH and Indexers is SSL/encrypted by default. You don't need to do anything unless you want to change the default certs. https://docs.splunk.com/Documentation/Splunk/7.3.1/Security/Securingdistributedsearchheadsandpeers

0 Karma
Get Updates on the Splunk Community!

Improve Data Pipelines Using Splunk Data Management

  Register Now   This Tech Talk will explore the pipeline management offerings Edge Processor and Ingest ...

3-2-1 Go! How Fast Can You Debug Microservices with Observability Cloud?

Register Join this Tech Talk to learn how unique features like Service Centric Views, Tag Spotlight, and ...

Thank You for Celebrating CX Day with Splunk!

Yesterday the entire team at Splunk + Cisco joined the global celebration of CX Day - celebrating our ...