Indexers SSL Problem

liam78 — Mon, 30 Sep 2019 12:38:24 GMT

Hi guys.

I'm trying to configure my two indexers to receive data with SSL.

My inputs.conf configuration is:

# BASE SETTINGS
# [Splunktcp: // 9997]
[Splunktcp-ssl: // 9997]

# SSL SETTINGS
[SSL]
rootCA = $SPLUNK_HOME / etc / apps / MY_all_certificates / certs / MY_CA.pem
serverCert = $SPLUNK_HOME / etc / apps / MY_all_certificates / certs / MY_host.pem
sslPassword = mypassword
requireClientCert = true
# If using compressed = true, it must be set on the forwarder outputs as well.
# compressed = true

But I get an error on Indexers in splunkd:

ERROR TcpInputConfig - SSL context cannot be created two required serverCert parameter from [SSL] room. Will not open splunk to splunk (SSL) IPv4 port 9997

The problem is that it does not specify what the parameter is.

Thanks.

Re: Indexers SSL Problem

hettervik — Wed, 19 Aug 2020 07:33:55 GMT

Did you ever found out what is causing this error? I've seem to have the same problem.

https://community.splunk.com/t5/Splunk-Enterprise/How-to-fix-quot-missing-serverCert-parameter-from-SSL-stanza/td-p/514109

Surely I've sat the "serverCert" parameter in the SSL stanza, but nevertheless, Splunk doesn't seem to accept it.

topic Re: Indexers SSL Problem in Getting Data In

Indexers SSL Problem

Re: Indexers SSL Problem