Deployment Architecture

certificated mismatch

dmlee
Communicator

Hi, I have one search head(ver 4.1.4) and two index servers(4.1.4) , when I do search , sometimes I got an error message "Unable to distribute to peer named splunk_index01 at url https://172.30.6.xxx:8089 because peer has status=Certificate Mismatch" , but sometimes it works fine (with no error message, and I can see search results correctlly )

All three servers have "enableSplunkSSL=false" (server.conf)

Any idea about it ? thanks.

Tags (1)
0 Karma

jrodman
Splunk Employee
Splunk Employee

Do you require disabling ssl? This configuration is vastly less tested.

If we produce this message for SSL-disabled systems, that is in and of itself a bug. We should work this problem with support.

dmlee
Communicator

Hi Jrodman,

yes , we set "enableSplunkSSL=false" (server.conf) to improve replication speed.

I will file a support case, thanks

0 Karma
Get Updates on the Splunk Community!

Data Management Digest – November 2025

  Welcome to the inaugural edition of Data Management Digest! As your trusted partner in data innovation, the ...

Splunk Mobile: Your Brand-New Home Screen

Meet Your New Mobile Hub  Hello Splunk Community!  Staying connected to your data—no matter where you are—is ...

Introducing Value Insights (Beta): Understand the Business Impact your organization ...

Real progress on your strategic priorities starts with knowing the business outcomes your teams are delivering ...