Why am I receiving a certificate error when trying to oneshot?

jwhughes58 — Mon, 10 Oct 2022 23:16:52 GMT

Hi All,

I'm getting the below

splunk add oneshot ./kaseya.txt -index main -sourcetype asset‌☁️‌kaseya-edge:agent ERROR: certificate validation: self signed certificate in certificate chain Couldn't complete HTTP request: error:14090086:SSL routines:ssl3_get_server_certificate:certificate verify failed

Since I'm working on my development laptop, I don't care if this is signed or not. What I need is a way of stopping the error.

TIA,
Joe

Re: Why am I receiving a certificate error when trying to oneshot?

NullZero — Mon, 17 Oct 2022 15:29:54 GMT

This looks like one of the following or at least a path to resolving:

Can the splunk user read that file? CHMOD / CHOWN settings correct?
Also I would encourage you to put the file in /tmp/<yourfile.txt> rather than the /opt/splunk/bin directory
I believe that this is a standalone splunk instance and not a distributed environment as you mentioned a laptop.
Which user owns the splunk folder and processes, are the basic permissions set right and is there a home directory for the splunk user? Otherwise add a home dir for splunk (mkhomedir_helper splunk)

topic Why am I receiving a certificate error when trying to oneshot? in Getting Data In

Why am I receiving a certificate error when trying to oneshot?

Re: Why am I receiving a certificate error when trying to oneshot?