In a Distributed Logpoint with multiple network interfaces, connections to remote Logpoints fail if non-primary IP is used

Reference ID: LP-70198

Date Published: 2026-01-02

Affected Product: Logpoint

Affected Version: v7.8.0

Fix Version: v7.8.2

Description:

From Logpoint v7.8.0, SSL certificate verification is enforced for all internal HTTPS communication between Logpoints for enhanced security.

In a Distributed Logpoint with multiple network interfaces, the SSL certificate generated includes only the Primary IP address in the SAN field.

If the Remote Logpoint configuration on the Search Head or Logpoint Collector is set to an IP address on a network interface other than the Distributed Logpoint's Primary IP, the connection will fail. This happens because the IP address used for the connection does not match the IP address listed in the SSL certificate’s SAN field, causing SSL certificate verification to fail.

Note:

The Primary IP is the IP address that the operating system uses as the source address for outbound network traffic. For Distributed Logpoint, the Primary IP is automatically selected by the system for internal communication and is the only IP address included in the generated SSL certificate. You can access the primary IP from Logpoint General Information in System Settings. 

Workaround

To ensure successful connections:

1. In Distributed Logpoint, go to Settings >> System Settings from the navigation bar and click System Settings.
2. Select General and copy the IP address.
3. Go to Search Head or Logpoint Collector and configure Remote Logpoint.
4. Add the copied IP address in the IP Address or DNS Name of the remote Logpoint.
5. Upgrade to Logpoint v7.8.0.

Support

If you have any questions or require assistance, create a support ticket.