Getting Data In

How to deploy Splunk default certificates in syslog-ng ?

dhavamanis
Builder

We have generated default certs in Splunk for forwarder and its working fine with Splunk Universal forwarder. Can you please provide the steps to deploy the these certs in syslog-ng with configuration details.

Tags (2)
0 Karma
1 Solution

dhavamanis
Builder

We have found the setting here,

http://docs.splunk.com/Documentation/Storm/Storm/User/Howtosetupsyslog-ng

added the certs like below config.

destination d_splunk {
tcp("splunkindexer.xyc.com" port(5140) tls(peer-verify(required-untrusted) ca_dir("/opt/syslogng/etc/syslog-ng/ca.d")));

};

View solution in original post

0 Karma

dhavamanis
Builder

We have found the setting here,

http://docs.splunk.com/Documentation/Storm/Storm/User/Howtosetupsyslog-ng

added the certs like below config.

destination d_splunk {
tcp("splunkindexer.xyc.com" port(5140) tls(peer-verify(required-untrusted) ca_dir("/opt/syslogng/etc/syslog-ng/ca.d")));

};

0 Karma
Get Updates on the Splunk Community!

Pro Tips for First-Time .conf Attendees: Advice from SplunkTrust

Heading to your first .Conf? You’re in for an unforgettable ride — learning, networking, swag collecting, ...

Raise Your Skills at the .conf25 Builder Bar: Your Splunk Developer Destination

Calling all Splunk developers, custom SPL builders, dashboarders, and Splunkbase app creators – the Builder ...

Hunt Smarter, Not Harder: Discover New SPL “Recipes” in Our Threat Hunting Webinar

Are you ready to take your threat hunting skills to the next level? As Splunk community members, you know the ...