How can I disable certificate validation for API calls?

[graememeyer]

Does anyone know how you can disable certificate validation for the api calls? e.g. if you have a local cb instance that doesn't use HTTPS certs for validation, the requests fail

[carbonblack · Accepted solution]

To disable SSL validation for on-premise installs of Splunk and Cb Response, create a file named /opt/splunk/etc/apps/DA-ESS-CbResponse/local/DA-ESS-CbResponse_Settings.conf with the following contents:

[ssl_info]
ssl_verify = false

More details are available on the Cb Response App for Splunk page on Splunkbase (https://splunkbase.splunk.com/app/3336/#/details)