Hello all,
So, for the last couple of weeks I have been trying to change the certificates on our forwarders.
Our infrastructure looks something like this:
UF and other appliances (1) -> Central UF (2) -> HF on AWS (3) -> Splunk Cloud (4)
Everything works in a dev environment, but not in prod. What I'm trying to do is change the certs between (2) and (3), since the app from Splunk already takes care of the connection between (3) and (4). The only difference between dev and prod is that I stop at (3), never sending anything to (4).
Is there some fundamental error I'm making here? Like, maybe because of (4) I can't use self signed in the middle.
Any suggestions are welcomed, since I'm all out of ideas for now.
Thank you
