Getting Data In

Is it possible to configure SSL encryption between a universal forwarder and Splunk Sandbox?

at0mskxiv
New Member

Hi Splunk Guys!

Is it possible to configure SSL encryption between Universal forwarder and Splunk Sandbox? Or Splunk Sandbox is a trial version and do not support SSL encryption?

0 Karma

declanshanaghy
Explorer

Recently we secured all data inputs with a unique SSL certificate and key for each instance and that is now the default configuration.

After logging into your instance, click on the "Universal Forwarder" app from the launcher page.
From the subsequent page you can download the app and follow the instructions to install it into a universal forwarder.

The forwarder will then automatically connect to your instance using an encrypted AND authenticated connection.

0 Karma

fabioyamate
New Member

So in sandbox I don't have to setup any security detail (certificates), is that it?

Does the same applies to Splunk Cloud? Does self signed certificate is used for enterprise only?

Thanks

0 Karma
Get Updates on the Splunk Community!

Enterprise Security Content Update (ESCU) | New Releases

In December, the Splunk Threat Research Team had 1 release of new security content via the Enterprise Security ...

Why am I not seeing the finding in Splunk Enterprise Security Analyst Queue?

(This is the first of a series of 2 blogs). Splunk Enterprise Security is a fantastic tool that offers robust ...

Index This | What are the 12 Days of Splunk-mas?

December 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...