topic Re: Data Power extension : Configure https requests to send certificates in Splunk AppDynamics

Data Power extension: Configure https requests to send certificates

Himanshu_Sarda — Tue, 09 Oct 2018 19:47:33 GMT

Hi,

I am trying to connect to an IBM Data Power server using the Appdynamics extension. However, I am getting an authentication failure when trying to connect to DP. The reason for the failure is that the request originating from the AppDyanmics monitor does not have a certificate in it. I tried finding any documentation regarding SSL set up for Data power monitors but unable to find any.

Can someone please guide me on how this can be configured?

Thanks.

Re: Data Power extension : Configure https requests to send certificates

CommunityUser — Tue, 09 Oct 2018 20:04:34 GMT

Hi @Himanshu.Sarda

Thanks for posting the query on the AppDynamics Community.

We are unable to locate the extension (IBM Data Power) you are referring to in the list of extensions listed in AppDynamics Exchange. To investigate further, request you to share exact name of the AppDynamics extension that you are using.

Re: Data Power extension : Configure https requests to send certificates

Himanshu_Sarda — Tue, 09 Oct 2018 20:25:07 GMT

Here is the link for the extension which I am using:

https://www.appdynamics.com/community/exchange/extension/datapower-monitoring-extension/

Re: Data Power extension : Configure https requests to send certificates

Bhuvnesh_Kumar — Tue, 09 Oct 2018 21:16:08 GMT

Hi Himanshu,

Please add the following fields to your config.yml file.

Under the server you are trying to monitor, add the following field for SSL.

servers:
  - uri: http://localhost:5550/service/mgmt/current
    displayName: server1
    username: user
    password: welcome
    useSsl: true

 sslTrustStorePath: "" # If not set, defaulted to machine-agent/conf/extensions-cacerts.jks. The prop "-Dappdynamics.extensions.truststore.path=/path/cacerts" takes precedence if set
 sslTrustStorePassword: ""
 sslTrustStoreEncryptedPassword: ""

Do let us know if you face any further issues.

Thanks,

Bhuvnesh

Re: Data Power extension : Configure https requests to send certificates

Himanshu_Sarda — Tue, 09 Oct 2018 21:29:54 GMT

Hi Bhuvanesh,

What is s"slTrustStoreEncryptedPassword" ? Is it mandatory to add this parameter ?

Thanks and Regards,

Himanshu.

Re: Data Power extension : Configure https requests to send certificates

Himanshu_Sarda — Wed, 10 Oct 2018 18:46:14 GMT

Hi,

I tried adding the parameters to the file, but it does not look like the certificate is getting picked up. Do we have a way to determine from the logs the certificate which is being sent across ?

Below is the snapshot of the config.yml file, not sure if there is something which I might be missing. Can you please check if this looks fine to you or if there are any changes which needs to be made?

#This will create it in specific Tier. Replace <TIER_NAME>
metricPrefix: Server|Component:XXX-XXX|Custom Metrics|DataPower

servers:
- uri: https://xxxxxxxxxxx:5550/service/mgmt/current
displayName: XX
username: XXXXX
password: XXXXXXX
useSsl: true
sslTrustStorePath: "/opt/certs/cert.jks"
sslTrustStorePassword: "XXXX"
domains:
- default
- XXXXXX
- Platform
useBulkApi: true

- uri: https://XXXXX:5550/service/mgmt/current
displayName: XX
username: XXXXX
password: XXXXXX
useSsl: true
sslTrustStorePath: "/opt/certs/cert.jks"
sslTrustStorePassword: "changeit"
domains:
- default
- XXXXX
- Platform
useBulkApi: true

# - uri: https://someotherhost:5550/service/mgmt/current
# displayName: server2
# username: user
# passwordEncrypted: C043Fag+LKEZM0AQTWPy2g==
# domainsRegex:
# - fin_domain.*
# - .*security.*
# useBulkApi: true

# number of concurrent tasks
numberOfThreads: 5

#encryptionKey: welcome

connection:
socketTimeout: 2000
connectTimeout: 2000
sslCertCheckEnabled: false
sslVerifyHostname: false
sslProtocols: ["TLSv1"]

Re: Data Power extension : Configure https requests to send certificates

Bhuvnesh_Kumar — Wed, 10 Oct 2018 21:10:16 GMT

Hi Himanshu,

Please file a support ticket and attach the /logs, /conf and the /monitors folder for us to further investigate this issue.

Thanks,

Bhuvnesh

Re: Data Power extension : Configure https requests to send certificates

Mina_Luka — Wed, 10 May 2023 12:06:32 GMT

i Went to ignore the cert.

Re: Data Power extension: Configure https requests to send certificates

iamryan — Tue, 16 May 2023 13:20:28 GMT

Hi @Mina.Luka,

Given how old this thread is, you should try contacting AppD support. How do I submit a Support ticket? An FAQ