All Apps and Add-ons

How to configure app for ssl connection between Mint SDK and HEC?

chulhyuncho
Engager

Now, I set up Splunk Mint. I want to collect App log by http event collector(HEC).
I have to use TLS1.2 between mobile app and HEC.
So, I already config as follows;
- On setting of HTTP Event Collector : checked "Enable SSL"

In Android Studio, I write a code
- Mint.initAndStartSessionHEC(this.getApplication(), "https://xxx.xx.xx.xxx:8088/services/collector/mint", "my_token");

And then, when I run this code in Android Studio.
This error is occurred.
"Transmitting Exception unexpected end of stream on Connection{xxx.xx.xx.xxx:8088, proxy=DIRECT@ hostAddress=xxx.xx.xx.xxx cipherSuite=none protocol=http/1.1} (recycle count=0)"

I think I have to write more code or set up configuration in App Source for TLS connection.

Plz, let me know what I have to do.
Thank so much.

0 Karma
1 Solution

chulhyuncho
Engager

I resolved this issue.
Actually, this issue is not relative with Mint SDK.
On HEC have to has SSL Certificates.
Splunk give us a self-signed certificate, but the security policy is not allow self-signed certificates.
So if you want to collect app log by https protocol through HEC, you have to set up certificates on HEC server.

Hava a good day!!!

View solution in original post

chulhyuncho
Engager

I resolved this issue.
Actually, this issue is not relative with Mint SDK.
On HEC have to has SSL Certificates.
Splunk give us a self-signed certificate, but the security policy is not allow self-signed certificates.
So if you want to collect app log by https protocol through HEC, you have to set up certificates on HEC server.

Hava a good day!!!

Get Updates on the Splunk Community!

Splunk Security Content for Threat Detection & Response, Q1 Roundup

Join Principal Threat Researcher, Michael Haag, as he walks through:An introduction to the Splunk Threat ...

Splunk Life | Happy Pride Month!

Happy Pride Month, Splunk Community! 🌈 In the United States, as well as many countries around the ...

SplunkTrust | Where Are They Now - Michael Uschmann

The Background Five years ago, Splunk published several videos showcasing members of the SplunkTrust to share ...