Deployment Server flooded with SSL handshake errors from forwarders. How to...
We've recently locked down everything to use TLS 1.2 and I think i've fixed just about everything, however, my deployment server is full of SSL3 handshake errors with the forwarders. How do I set up...
View ArticleIn attempting to create a non-indexer discovery based app, SSL forwarding...
We've configured SSL forwarding using indexer discovery successfully but unfortunately some old Server 2008 SP2 boxes have come out of the woodwork and the highest version of the forwarder we can...
View ArticleIs there a way to only use DNS to connect to a search head?
I have two ways to connect to a search head, and 1 is secured with SSL, while the other is not. 1: https://ip:port 2: https://dns.name.com:port Is there a way I can disable option 1, and force everyone...
View ArticleDoes the Splunk Add-on for Citrix NetScaler support polling the nitro API via...
Does the Splunk Add-on for Citrix NetScaler support polling the nitro API via SSL? I don't see any option in the config to specify http vs https.
View ArticleHow to enable SSL on Splunk HTTP Event Collector on Windows 7?
I am using Windows 7, and I enabled SSL on Splunk Enterprise global setting and created and enabled the HTTP Event Collector (HEC) token. Then I used curl below to send event over using HEC event...
View Articlestreamfwd SSL decryption:session keys not found
I am trying to decrypt https traffic (using RSA chipher) : 1, add the private key ./streamfwd --addsslkey test /tmp/server.key 2, add 2 lines into streamfwd.conf sslServer.0.address = 10.1.1.98...
View ArticleHow to change the Splunk Web URL secured by https?
Hello, I like to update/rename the Splunk Web URL which is currently secured with HTTPS **E.g.** -> https://localhost:8000 **Rename/Update** -> https://mysplunkurl.co.in My plan is to update the...
View ArticleForwarder outputs.conf file : question about sslPassword /...
Hello guys, I'm using this on deployment-apps (universal forwarder deployment) : [tcpout] defaultGroup = default-autolb-group [tcpout:default-autolb-group] server = indexer:9997...
View ArticleHow to resolve "ssl23_get_client_hello unknown protocol" error on indexer and...
Hello guys, I'm using this on deployment-apps (universal forwarder deployment) : [tcpout] defaultGroup = default-autolb-group [tcpout:default-autolb-group] server = indexer:9997...
View ArticleReport Sender: Is this app compatible with HTTPS?
Hi All I successfully used Report Sender with an HTTP url but not with HTTPS url when i activated SSL on Splunk Web Someone got an idea? Regards
View ArticleWhy am I unable to configure SSL for Splunk Web?
Hello I've tried to configure SSL for Web access, but it's not working: 12-01-2016 11:18:39.867 +0100 ERROR SSLCommon - Can't read key file D:\splunk\etc\auth\splunkweb\splunk.key errno=185073780...
View ArticleHow to disable SSLv3 and TLS1.0 for HTTP Event Collector?
I am trying to disable SSLv3 and TLS1.0 on HTTP Event Collector, for the life of me I can't figure out where to set the allowed sslVersions. It's already set in...
View ArticleHow to deploy self-signed certs to deployment clients using the deployment...
How do I push my self-signed certs to universal forwarders using the deployment server. The docs say: Define the following stanzas in $SPLUNK_HOME/etc/system/local/outputs.conf (or in the appropriate...
View ArticleSplunk Add-on for Box: Why am I receiving "Failed to Grant access" error when...
Hi, We've installed Splunk Add-on for Box on intermediate forwarder and we are trying to configure it by going to manage apps -> Splunk Add-on for Box -> Setup. Setup requires to enter Box Oauth2...
View ArticleLDAP by SSL using WIndows 2012R2 cannot connect to Active Directory server
Trying to use LDAP with SSL and running into issue 'Can't contact LDAP server'. Looked on Splunk Answers and saw similar issue at URL...
View ArticleWhy is the Deployment Server Forwarder Management slow to return the number...
After specifying an SslKeysfile value in server.conf, the Deployment Server Forwarder Management interface is very slow to return the number of clients connected. I have over 1000 forwarders that...
View ArticleHow to configure SSL between a forwarder and indexer (both Windows) using...
Hi there, I know there are many answers here for configuring SSL flows, but they're all getting a bit outdated now. I've been following this one, but it's from 2010, and lots of things have changed....
View ArticleSplunk Add-on for Kafka: How to resolve JMX server error "Error setting up...
I have enabled JMX on Kafka cluster without SSL. But I still below errors in jmx.log com.splunk.modinput.ModularInput -0 [main] ERROR - Error executing modular input : Error setting up SSL socket...
View ArticleWhy am I receiving "SSL input filter read failed" error after configuring an...
Hello We're using an Apache proxy for SSO with Windows auth to Splunk. Some days ago, I've configured the proxy to https and redirect http to https. httpd.conf: ServerRoot "d:/Apache24" DocumentRoot...
View ArticleWhat is the difference between TcpOutputProc and TcpOutputFd?
SSL Question: What is the difference between TcpOutputProc and TcpOutputFd? I am getting an error message on my forwarder saying TcpOutputFD - Connection to host ip:port failed. On the flip side, I am...
View Article