https://community.splunk.com/t5/All-Apps-and-Add-ons/eStreamer-for-Splunk-Unable-to-get-certificate-Mac-verify-error/m-p/351042#M42391 <P>Wanted to come back to post the fix for anyone else that may run into this issue in the future. The fix was related to a password issue in the configuration file. When I went back and checked on the password on the back end there was no single quotes around the password. Once this was changed our Splunk instance started receiving logs from eStreamer right away. Ex: 'your_password'</P> Mon, 13 Mar 2017 15:58:54 GMT matthewssa 2017-03-13T15:58:54Z https://community.splunk.com/t5/All-Apps-and-Add-ons/eStreamer-for-Splunk-Unable-to-get-certificate-Mac-verify-error/m-p/351041#M42390 <P><span class="lia-inline-image-display-wrapper" image-alt="alt text"><img src="https://community.splunk.com/t5/image/serverpage/image-id/2610iA440A37798C9B462/image-size/large?v=v2&amp;px=999" role="button" title="alt text" alt="alt text" /></span></P> <P>Hello!</P> <P>I've stumbled across an interesting error with eStreamer. It is returning that there is a invalid password which can not be the case. I've opened up the key being used in the eStreamer.conf file with the exact same password and it shows OK and the expiration date is OK. It is a new key and I have also tried updating the eStreamer app from 2.2.1 to 2.2.2 with still no luck. Any ideas?</P> Fri, 10 Mar 2017 15:06:25 GMT https://community.splunk.com/t5/All-Apps-and-Add-ons/eStreamer-for-Splunk-Unable-to-get-certificate-Mac-verify-error/m-p/351041#M42390 matthewssa 2017-03-10T15:06:25Z https://community.splunk.com/t5/All-Apps-and-Add-ons/eStreamer-for-Splunk-Unable-to-get-certificate-Mac-verify-error/m-p/351042#M42391 <P>Wanted to come back to post the fix for anyone else that may run into this issue in the future. The fix was related to a password issue in the configuration file. When I went back and checked on the password on the back end there was no single quotes around the password. Once this was changed our Splunk instance started receiving logs from eStreamer right away. Ex: 'your_password'</P> Mon, 13 Mar 2017 15:58:54 GMT https://community.splunk.com/t5/All-Apps-and-Add-ons/eStreamer-for-Splunk-Unable-to-get-certificate-Mac-verify-error/m-p/351042#M42391 matthewssa 2017-03-13T15:58:54Z https://community.splunk.com/t5/All-Apps-and-Add-ons/eStreamer-for-Splunk-Unable-to-get-certificate-Mac-verify-error/m-p/351043#M42392 <P>Thanks for the tip Matthew! This fixed my issue just now!</P> Thu, 16 Mar 2017 12:37:57 GMT https://community.splunk.com/t5/All-Apps-and-Add-ons/eStreamer-for-Splunk-Unable-to-get-certificate-Mac-verify-error/m-p/351043#M42392 JackV 2017-03-16T12:37:57Z https://community.splunk.com/t5/All-Apps-and-Add-ons/eStreamer-for-Splunk-Unable-to-get-certificate-Mac-verify-error/m-p/351044#M42393 <P>Wow! I wish I would have found this answer hours ago. I had to edit local/estreamer.conf to add the tick marks around the password... Maybe the app can be updated to do this automatically? I never would have figured that out.</P> Thu, 29 Jun 2017 16:14:36 GMT https://community.splunk.com/t5/All-Apps-and-Add-ons/eStreamer-for-Splunk-Unable-to-get-certificate-Mac-verify-error/m-p/351044#M42393 jordanmedved 2017-06-29T16:14:36Z https://community.splunk.com/t5/All-Apps-and-Add-ons/eStreamer-for-Splunk-Unable-to-get-certificate-Mac-verify-error/m-p/351045#M42394 <P>A new Splunk Firepower solution is now available if you are using Firepower version 6.x. You can download the new eStreamer eNcore for Splunk and the separately installable dashboard from the two links below:</P> <P>eStreamer eNcore<BR /> <A href="https://splunkbase.splunk.com/app/3662/">https://splunkbase.splunk.com/app/3662/</A></P> <P>eNcore Dashboard<BR /> <A href="https://splunkbase.splunk.com/app/3663/">https://splunkbase.splunk.com/app/3663/</A></P> <P>It is free to use and well documented but if you would like to purchase a TAC Support service so that you can obtain installation and configuration assistance and troubleshooting you can order the software from Cisco (support obligatory with this purchase). The Product Identifier is: FP-SPLUNK-SW-K9.</P> <P>Regardless of whether you take up the support option or not, updated versions will be made available to all free of charge and posted on Splunkbase as well as Cisco Downloads.</P> Wed, 02 Aug 2017 23:16:35 GMT https://community.splunk.com/t5/All-Apps-and-Add-ons/eStreamer-for-Splunk-Unable-to-get-certificate-Mac-verify-error/m-p/351045#M42394 douglashurd 2017-08-02T23:16:35Z