https://community.splunk.com/t5/Reporting/forward-data-to-non-splunk-system-over-tcp-using-ssl/m-p/135798#M3048 <P>Looking at the <A href="http://docs.splunk.com/Documentation/Splunk/6.0/Admin/Outputsconf">outputs.conf</A>, documentation, there are several sections for SSL config, and as long as you set:</P> <PRE><CODE>sendCookedData = false </CODE></PRE> <P>… it should work. At a minimum, as indicated in the quote from the outputs.conf page below, you must set <CODE>sslCertPath</CODE> which will enable SSL on that connection.</P> <PRE><CODE>#----SSL Settings---- # To set up SSL on the forwarder, set the following attribute/value pairs. # If you want to use SSL for authentication, add a stanza for each receiver that must be # certified. sslCertPath = &lt;path&gt; * If specified, this connection will use SSL. * This is the path to the client certificate. * There is no default value. </CODE></PRE> Mon, 11 Nov 2013 14:46:35 GMT jtrucks 2013-11-11T14:46:35Z https://community.splunk.com/t5/Reporting/forward-data-to-non-splunk-system-over-tcp-using-ssl/m-p/135797#M3047 <P>i would like to forward to data out of a splunk indexer to a non-splunk system. is there a way to do this via tcp using ssl ? the 'Forward data to third-party systems' page does not mention ssl: <A></A><A href="http://docs.splunk.com/Documentation/Splunk/6.0/Forwarding/Forwarddatatothird-partysystemsd">http://docs.splunk.com/Documentation/Splunk/6.0/Forwarding/Forwarddatatothird-partysystemsd</A></P> Sun, 10 Nov 2013 05:09:25 GMT https://community.splunk.com/t5/Reporting/forward-data-to-non-splunk-system-over-tcp-using-ssl/m-p/135797#M3047 monzy 2013-11-10T05:09:25Z https://community.splunk.com/t5/Reporting/forward-data-to-non-splunk-system-over-tcp-using-ssl/m-p/135798#M3048 <P>Looking at the <A href="http://docs.splunk.com/Documentation/Splunk/6.0/Admin/Outputsconf">outputs.conf</A>, documentation, there are several sections for SSL config, and as long as you set:</P> <PRE><CODE>sendCookedData = false </CODE></PRE> <P>… it should work. At a minimum, as indicated in the quote from the outputs.conf page below, you must set <CODE>sslCertPath</CODE> which will enable SSL on that connection.</P> <PRE><CODE>#----SSL Settings---- # To set up SSL on the forwarder, set the following attribute/value pairs. # If you want to use SSL for authentication, add a stanza for each receiver that must be # certified. sslCertPath = &lt;path&gt; * If specified, this connection will use SSL. * This is the path to the client certificate. * There is no default value. </CODE></PRE> Mon, 11 Nov 2013 14:46:35 GMT https://community.splunk.com/t5/Reporting/forward-data-to-non-splunk-system-over-tcp-using-ssl/m-p/135798#M3048 jtrucks 2013-11-11T14:46:35Z