Encryption

[Jyo_Reel]

Hello,

Can 8089 port traffic be encrypted?

What are the pros and cons?

[gcusello · Accepted solution]

Hi @Jyo_Reel,

8089 is a management port and it's already encrypted.

Anyway, the traffic port (by default 9997) can be encrypted, for more details see at https://docs.splunk.com/Documentation/Splunk/9.2.1/Security/ConfigureSplunkforwardingtousesignedcert....

Ciao.

Giuseppe

[Jyo_Reel]

Hello @gcusello 

Thanks for the quick response.

One of my colleagues mentioned that he observed some intermittent connectivity issues/data loss when 8089 encryption was enabled. 

What could be the possible reason?

Thanks.

[gcusello]

Hi @Jyo_Reel ,

I don't know what could happen, maybe someone did an error and configured data input on 8089.

The only way to understand something is finding who sent this unencrypted traffic on this port and check its configurations.

Ciao.

Giuseppe

P.S.: Karma Points are appreciated by all the Contributors 😉

[PickleRick]

It's a very vague description of a problem.

Anyway, traffic on management port (8089) is encrypted by default and has been at least since 7.0 version (for maaaaaany years now). And there is generally no good reason to disable it.