Search head is Linux and search peer is Windows Server 2008. Using the web interface Splunk Manager to connect to search peer using a local account (on the Windows machine) with admin rights. Has worked in the past... Title of this is the error message returned. What am I missing?
My guess from the 401 Unauthorized message is that either you have the wrong user/pass.
If you look in the remote $SPLUNK_HOME/var/log/splunk/splunkd_access.log around the time of the failure, do you see the 401 unauthorized there? Have you migrated these systems or otherwise changed the certificates of these splunk instances?
Possibly, but I have tried domain admin account as well as a local admin account. Also added account to Splunk.
M$ Firewall is turned off (for now). Can ping system.