https://community.splunk.com/t5/Getting-Data-In/Syslog-data-with-SSL-enabled/m-p/341015#M62875 <P>What exactly is your question?</P> <P>For sending SSL syslog data directly into Splunk, you can use a tcp-ssl input, see inputs.conf spec for details.</P> <P>In general it is considered best practice not to send syslog data directly to UDP/TCP inputs, but rather use a syslog daemon (rsyslog / syslog-ng) to receive the data and write it to disk, and then use file monitor inputs to get the data into splunk.</P> <P>Both rsyslog and syslog-ng support SSL syslog as far as I know, You best refer to the documentation of those tools themselves for details if you want to take that route.</P> Wed, 18 Apr 2018 14:17:23 GMT FrankVl 2018-04-18T14:17:23Z https://community.splunk.com/t5/Getting-Data-In/Syslog-data-with-SSL-enabled/m-p/341014#M62874 <P>To enforce security should be possible to configure a syslog listener with SSL enabled</P> Wed, 18 Apr 2018 13:51:52 GMT https://community.splunk.com/t5/Getting-Data-In/Syslog-data-with-SSL-enabled/m-p/341014#M62874 arkonner 2018-04-18T13:51:52Z https://community.splunk.com/t5/Getting-Data-In/Syslog-data-with-SSL-enabled/m-p/341015#M62875 <P>What exactly is your question?</P> <P>For sending SSL syslog data directly into Splunk, you can use a tcp-ssl input, see inputs.conf spec for details.</P> <P>In general it is considered best practice not to send syslog data directly to UDP/TCP inputs, but rather use a syslog daemon (rsyslog / syslog-ng) to receive the data and write it to disk, and then use file monitor inputs to get the data into splunk.</P> <P>Both rsyslog and syslog-ng support SSL syslog as far as I know, You best refer to the documentation of those tools themselves for details if you want to take that route.</P> Wed, 18 Apr 2018 14:17:23 GMT https://community.splunk.com/t5/Getting-Data-In/Syslog-data-with-SSL-enabled/m-p/341015#M62875 FrankVl 2018-04-18T14:17:23Z