Security

Configuring Splunk SSL for forwarder/indexer communication

liquidclay23
Explorer

Hey Splunkers,

This maybe less of a question and more of a comment. The "Configure Splunk forwarding to use signed certificates" documentation states you should configure:

sslPassword = The password for the CAcert

Obviously your not going to put the CA's secret password on a forwarder. I assume the intention is to say you would put the forwarder's certificate password here as entered by the CA when creating the cert. I believe this is poor verbiage.

In a related note - should you set a challenge password for this cert?

https://docs.splunk.com/Documentation/Splunk/7.2.5/Security/ConfigureSplunkforwardingtousesignedcert...

somesoni2
Revered Legend

Every Splunk documentation page has a comment section at the bottom where you can give your feedback/questions/concerns about the page's content. That comment goes to the Splunk Documentation management team directly, so I would suggest you post your feedback there (as well).

0 Karma
Career Survey
First 500 qualified respondents will receive a $20 gift card! Tell us about your professional Splunk journey.

Can’t make it to .conf25? Join us online!

Get Updates on the Splunk Community!

Index This | How many sevens are there between 1 and 100?

August 2025 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with this ...

Leveraging Automated Threat Analysis Across the Splunk Ecosystem

Enhance Security Operations with Automated Threat Analysis in the Splunk EcosystemAre you leveraging ...

What Is Splunk? Here’s What You Can Do with Splunk

Hey Splunk Community, we know you know Splunk. You likely leverage its unparalleled ability to ingest, index, ...