Join the Conversation
- Find Answers
- :
- Splunk Administration
- :
- Getting Data In
- :
- Re: Disable SSL verification
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark Topic
- Subscribe to Topic
- Mute Topic
- Printer Friendly Page
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hello,
How do I disable SSL verification on the Invicti Platform add-on?
Is this a replacement for the net sparker app ?
Thanks
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
On the second question: they're two separate add-ons for two separate Invicti products. The Invicti Platform Add-on (https://splunkbase.splunk.com/app/9588) (v1.0.0, released Aug 2026) is for the newer Invicti Platform (platform.invicti.com and its EU and CA regions, or an on-prem Platform host). The Netsparker Enterprise Add-on (https://splunkbase.splunk.com/app/5511) is still the one for Invicti Enterprise (netsparkercloud.com or Invicti Enterprise on-prem). So whether it replaces your Netsparker app depends on which product your license is for, not on which add-on is newer.
On SSL: the Invicti setup docs (https://docs.invicti.com/ip/splunk) cover the account, proxy and logging settings, but I don't see a verify-SSL toggle documented. Before you disable verification, I'd try fixing trust instead, since this usually comes up with an on-prem host signed by an internal CA or a TLS-inspecting proxy.
- If you go through a proxy, set it on the add-on's Proxy tab, and make sure the proxy's CA is trusted.
- Check whether the add-on ships a setting for it: grep -ri "verify" $SPLUNK_HOME/etc/apps/<invicti_app_folder>/default/ $SPLUNK_HOME/etc/apps/<invicti_app_folder>/README*
- If there's no setting, the fix is to get your internal CA into the CA bundle the add-on's Python uses, rather than editing its code. Any code edit gets overwritten on the next upgrade.
Set the add-on's log level to DEBUG for one run to see the exact TLS error. A hostname mismatch and an unknown CA have different fixes.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
On the second question: they're two separate add-ons for two separate Invicti products. The Invicti Platform Add-on (https://splunkbase.splunk.com/app/9588) (v1.0.0, released Aug 2026) is for the newer Invicti Platform (platform.invicti.com and its EU and CA regions, or an on-prem Platform host). The Netsparker Enterprise Add-on (https://splunkbase.splunk.com/app/5511) is still the one for Invicti Enterprise (netsparkercloud.com or Invicti Enterprise on-prem). So whether it replaces your Netsparker app depends on which product your license is for, not on which add-on is newer.
On SSL: the Invicti setup docs (https://docs.invicti.com/ip/splunk) cover the account, proxy and logging settings, but I don't see a verify-SSL toggle documented. Before you disable verification, I'd try fixing trust instead, since this usually comes up with an on-prem host signed by an internal CA or a TLS-inspecting proxy.
- If you go through a proxy, set it on the add-on's Proxy tab, and make sure the proxy's CA is trusted.
- Check whether the add-on ships a setting for it: grep -ri "verify" $SPLUNK_HOME/etc/apps/<invicti_app_folder>/default/ $SPLUNK_HOME/etc/apps/<invicti_app_folder>/README*
- If there's no setting, the fix is to get your internal CA into the CA bundle the add-on's Python uses, rather than editing its code. Any code edit gets overwritten on the next upgrade.
Set the add-on's log level to DEBUG for one run to see the exact TLS error. A hostname mismatch and an unknown CA have different fixes.
Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!
Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.
Persistent Queue at TcpOut — One of Splunk's Most Practical Features
Catalog Is Now Generally Available on Splunk Cloud Platform
Your Path to AgenticOps: AI Experiences for Every Splunk Practitioner
