Getting Data In

Telegraf - How to solve this HEC SSL Issue?

pmnathan75
New Member

Hi, I am trying to use Telegraf to send data to Splunk HEC. However not sure how to get past the certificate issue.

The error is

 

 

 

Error writing to outputs.http: Post "https://prd-p-9prd1.splunkcloud.com:8088/services/collector": x509: certificate is not valid for any names, but wanted to match prd-p-9prd1.splunkcloud.com

 

 

 

 

Telegraf Configuration:

 

 

 

[global_tags]
  index="vault_telemetry"
  datacenter = "us-east-1"
  role       = "vault-server"
  cluster    = "vault"
[agent]
  interval = "60s"
  round_interval = true
  metric_batch_size = 1000
  metric_buffer_limit = 10000
  collection_jitter = "0s"
  flush_interval = "10s"
  flush_jitter = "0s"
  precision = ""
  hostname = ""
  omit_hostname = false
[[inputs.statsd]]
  protocol = "udp"
  service_address = ":8125"
  metric_separator = "."
  datadog_extensions = true
[[outputs.http]]
  url = "https://prd-p-9prd1.splunkcloud.com:8088/services/collector"
  data_format = "splunkmetric"
  splunkmetric_hec_routing = true
  [outputs.http.headers]
    Content-Type = "application/json"
    Authorization = "Splunk f76599e2-77a5-xxxx-xxxx-b5af6d97xxxx"
    X-Splunk-Request-Channel = "f76599e2-77a5-xxxx-xxxx-b5af6d97xxxx"

 

 

 

 

Thank you

 

Labels (2)
0 Karma

dev0Guy
New Member

Have you figure out a solution?

0 Karma
Get Updates on the Splunk Community!

AI for AppInspect

We’re excited to announce two new updates to AppInspect designed to save you time and make the app approval ...

App Platform's 2025 Year in Review: A Year of Innovation, Growth, and Community

As we step into 2026, it’s the perfect moment to reflect on what an extraordinary year 2025 was for the Splunk ...

Operationalizing Entity Risk Score with Enterprise Security 8.3+

Overview Enterprise Security 8.3 introduces a powerful new feature called “Entity Risk Scoring” (ERS) for ...