I am interested in Block Signing of events as described here : http://docs.splunk.com/Documentation/Splunk/6.1.1/Security/ITDataSigning
Does this work with an Indexer Cluster?
Per documentation here:
http://docs.splunk.com/Documentation/Splunk/6.0.3/Security/ITDataSigning
"Block signing is not supported for distributed search."
Per documentation here:
http://docs.splunk.com/Documentation/Splunk/6.0.3/Security/ITDataSigning
"Block signing is not supported for distributed search."
and because Clustered Indexers implies distributed search (searching over each of the indexers in the cluster), block signing is not possible.