Trying to set up a new OPSEC connection using pull-cert.sh, why am I getting "File ../certs/ already exists. Exiting."?

[a212830]

Hi,

I'm trying to set up a new OPSEC connection and using the pull-cert.sh script, but it's telling me that "File ../certs/ already exists. Exiting."

Not sure where/how it's detecting this, or how I can delete it. Any suggestions?

[Chubbybunny]

are there any files in $SPLUNK_home/etc/apps/Splunk_TA_opseclea_linux22/certs/
Certificate file names end in .p12. If there happens to be one already referencing the connection name, you'll find this ui error.

Workaround: delete that .p12 file then restart splunkd. Once restarted, you'll need to setup the connection from scratch again.