Getting Data In

Syslog data with SSL enabled

arkonner
Path Finder

To enforce security should be possible to configure a syslog listener with SSL enabled

0 Karma

FrankVl
Ultra Champion

What exactly is your question?

For sending SSL syslog data directly into Splunk, you can use a tcp-ssl input, see inputs.conf spec for details.

In general it is considered best practice not to send syslog data directly to UDP/TCP inputs, but rather use a syslog daemon (rsyslog / syslog-ng) to receive the data and write it to disk, and then use file monitor inputs to get the data into splunk.

Both rsyslog and syslog-ng support SSL syslog as far as I know, You best refer to the documentation of those tools themselves for details if you want to take that route.

0 Karma
Get Updates on the Splunk Community!

.conf25 Community Recap

Hello Splunkers, And just like that, .conf25 is in the books! What an incredible few days — full of learning, ...

Splunk App Developers | .conf25 Recap & What’s Next

If you stopped by the Builder Bar at .conf25 this year, thank you! The retro tech beer garden vibes were ...

Congratulations to the 2025-2026 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...