topic Re: Splunk Cloud Trial HEC HTTP SSL certificate invalid- How can I change the port 433 to disabled? in All Apps and Add-ons

Splunk Cloud Trial HEC HTTP SSL certificate invalid- How can I change the port 433 to disabled?

goducks76 — Mon, 12 Sep 2022 16:08:45 GMT

The default port is 8088 with the below address. Due to invalidate certificate I have problem posting data there w. my iPaaS application. Can someone help advise as changing the port to 443 (valid) is disabled?

https://prd-p-4le0q.splunkcloud.com:8088/

Re: Splunk Cloud Trial HEC HTTP SSL certificate invalid- How can I change the port 433 to disabled?

richgalloway — Mon, 12 Sep 2022 16:43:32 GMT

You can't change the port HEC uses. The best solution is to get a working certificate.

Re: Splunk Cloud Trial HEC HTTP SSL certificate invalid- How can I change the port 433 to disabled?

goducks76 — Mon, 12 Sep 2022 16:46:02 GMT

How do you get a "working certificate update" to the Trial server? Is there a process you can share? I could download https://prd-p-4le0q.splunkcloud.com/en-US/ 443 but someone need to install it to port 8088. Thanks!

Re: Splunk Cloud Trial HEC HTTP SSL certificate invalid- How can I change the port 433 to disabled?

richgalloway — Mon, 12 Sep 2022 17:53:22 GMT

Certificates are port-agnostic. What works with port 443 should also work with port 8088.

Re: Splunk Cloud Trial HEC HTTP SSL certificate invalid- How can I change the port 433 to disabled?

goducks76 — Mon, 12 Sep 2022 20:35:23 GMT

Yes SSL cert is agnostic but I don't know how to install it to HEC port 8088 as its currently invalid. Is there such process you can share?

Re: Splunk Cloud Trial HEC HTTP SSL certificate invalid- How can I change the port 433 to disabled?

scelikok — Mon, 12 Sep 2022 21:11:45 GMT

Hi @goducks76,

Splunk Cloud trial HEC inputs are using only self-signed certificates. You should disable certificate verification on your application that post data.