Installation

splunk install app from an insecure URL

attilatar
Explorer

Hello,

I'm trying to install an app via command line similar to this:
splunk install app https://self_signed_cetificate_server.org/splunk-app-for-unix-and-linux_523.tgz -auth admin:StrongPassword

Since the server is using https with a self signed certificate the installation fails, with this error:
Unexpected error downloading update: error:14090086:SSL routines:ssl3_get_server_certificate:certificate verify failed

Are there any options of the "splunk install app" command that would allow me to use an insecure https server ?

Any way of doing this without downloading the file first with a separate tool like curl or wget?

Tags (1)

mspoerr
Path Finder

I was able to get it working with the following setting in server.conf

[applicationsManagement]
sslVerifyServerCert = false

 

davpx
Communicator

Download the app yourself and unpack to etc/apps if you have this much permission. Otherwise, it seems you have splunk admin permissions, download locally and upload via manage apps.

0 Karma
Get Updates on the Splunk Community!

Splunk Training for All: Meet Aspiring Cybersecurity Analyst, Marc Alicea

Splunk Education believes in the value of training and certification in today’s rapidly-changing data-driven ...

Investigate Security and Threat Detection with VirusTotal and Splunk Integration

As security threats and their complexities surge, security analysts deal with increased challenges and ...

Observability Highlights | January 2023 Newsletter

 January 2023New Product Releases Splunk Network Explorer for Infrastructure MonitoringSplunk unveils Network ...