Getting Data In

Can SSL be configured when sending data to Universal Forwarder through TCP connection from an external source?

ankithreddy777
Contributor

Hi,
Data is sent to Splunk Universal Forwarder (UF) through the TCP connection. From UF, data is forwarded to indexers. As we know SSL is supported by Splunk when Data is sent to Indexers. But can SSL be configured when sending data to Splunk UF through TCP connection from an external source?

0 Karma

gjanders
SplunkTrust
SplunkTrust

As per Get data from TCP and UDP ports refer to :

Configure a TCP input over SSL

[tcp-ssl:]

Use this stanza type if you receive
encrypted, unparsed data from a
forwarder or third-party system. Set
to the port on which the
forwarder or third-party system is
sending unparsed, encrypted data.

So yes the universal forwarder can use a tcp-ssl stanza to receive encrypted SSL traffic as a listener...

0 Karma
Get Updates on the Splunk Community!

Index This | What did the zero say to the eight?

June 2025 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with this month’s ...

Splunk Observability Cloud's AI Assistant in Action Series: Onboarding New Hires & ...

This is the fifth post in the Splunk Observability Cloud’s AI Assistant in Action series that digs into how to ...

Now Playing: Splunk Education Summer Learning Premieres

It’s premiere season, and Splunk Education is rolling out new releases you won’t want to miss. Whether you’re ...