Solved: How to enable TCP Data Input with SSL?

emily12234 · ‎08-31-2018

Hi

7.1.2 Splunk on Windows, I need to send log through TCP with SSL.
How can I enable TCP SSL?

Thanks
Regards

renjith_nair · ‎08-31-2018

You could use tcp-ssl:port configuration in inputs.conf

[tcp-ssl:<port>]
* Use this stanza type if you are receiving encrypted, unparsed data from a
  forwarder or third-party system.
* Set <port> to the port on which the forwarder/third-party system is sending
  unparsed, encrypted data.
* To create multiple SSL inputs, you can add the following attributes to each 
[tcp-ssl:<port>] input stanza. If you do not configure a certificate in the 
port, the certificate information is pulled from the default [SSL] stanza: 
  * serverCert = <path_to_cert> 
  * sslRootCAPath = <path_to_cert> This attribute should only be added 
    if you have not configured your sslRootPath in server.conf. 
  * sslPassword = <password>

---
What goes around comes around. If it helps, hit it with Karma 🙂

View solution in original post

renjith_nair · ‎08-31-2018

You could use tcp-ssl:port configuration in inputs.conf

[tcp-ssl:<port>]
* Use this stanza type if you are receiving encrypted, unparsed data from a
  forwarder or third-party system.
* Set <port> to the port on which the forwarder/third-party system is sending
  unparsed, encrypted data.
* To create multiple SSL inputs, you can add the following attributes to each 
[tcp-ssl:<port>] input stanza. If you do not configure a certificate in the 
port, the certificate information is pulled from the default [SSL] stanza: 
  * serverCert = <path_to_cert> 
  * sslRootCAPath = <path_to_cert> This attribute should only be added 
    if you have not configured your sslRootPath in server.conf. 
  * sslPassword = <password>

---
What goes around comes around. If it helps, hit it with Karma 🙂

kevinitc · ‎03-05-2019

Tried this on fresh install : "Could not find config id for port ". Any thoughts ?

Hari · ‎09-01-2020

Same issue is comming in my system. Did you find any solution?

How to enable TCP Data Input with SSL?

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Catalog Is Now Generally Available on Splunk Cloud Platform

Your Path to AgenticOps: AI Experiences for Every Splunk Practitioner

The Data Connection - October 2026

Join the Conversation