Why am I receiving a certificate error when trying to oneshot?

[jwhughes58]

Hi All,

I'm getting the below

splunk add oneshot ./kaseya.txt -index main -sourcetype asset‌☁️‌kaseya-edge:agent
ERROR: certificate validation: self signed certificate in certificate chain
Couldn't complete HTTP request: error:14090086:SSL routines:ssl3_get_server_certificate:certificate verify failed

Since I'm working on my development laptop, I don't care if this is signed or not.  What I need is a way of stopping the error.

TIA,
Joe

[NullZero]

This looks like one of the following or at least a path to resolving:

• Can the splunk user read that file? CHMOD / CHOWN settings correct?
• Also I would encourage you to put the file in /tmp/<yourfile.txt> rather than the /opt/splunk/bin directory
• I believe that this is a standalone splunk instance and not a distributed environment as you mentioned a laptop.
• Which user owns the splunk folder and processes, are the basic permissions set right and is there a home directory for the splunk user? Otherwise add a home dir for splunk (mkhomedir_helper splunk)