Hi one option is use several strategies which are pointing to different LDAP servers which have identical content. Another option is use LB before LDAPs and use this VIP address as server for strategy. That is probably more easier solution for overall. r. Ismo ... View more

I will need to double check if the key is in the cert. The other issue that just started is as I modify the inputs.conf and server.conf ... Some of my other indexes stop receiving data and once I # comment out these new SSL entries, the indexes start working again. The inputs for these indexes use a standard [monitor://] input ... My short-term goal is to accept TCP-SSL connections in the forwarder but keep the inter-splunk traffic non-SSL for now. I do plan to go change but not at thsi time ... View more

I got this error as well: 10-09-2014 15:46:27.158 +0100 ERROR ExecProcessor - message from "E:\tools\SplunkForwarder\bin\splunk-admon.exe" splunk-admon - AdQuery::ProcessMessage: Cannot get uSNChanged from message. Had checked the \bin directory, the splunk-admon.exe is not missing. Not sure what to do next though. ... View more