Security

How to secure Splunk with Multi CA

eddiiyzhang
Engager

How to secure Splunk with Multi CA
we are securing the Splunk Platform with ssl, data flow TOP as following,

ufwd(subbranch)--->hfwd(subbranch)---->hfwd(global)--->indexer(global)

The subbranrch and global use different CA,

we have configured "hfwd(subbranch)---->hfwd(global)" and "hfwd(global)--->indexer(global)" with certificate issued by global CA successfully
But the "ufwd(subbranch)--->hfwd(subbranch)" needs to secure with certificate issued by subbranch CA,
we need to configure two CA on hfwd(subbranch), How to configure the CA path on hfwd(subbranch)?

Tags (2)

inventsekar
SplunkTrust
SplunkTrust

the most difficult part of the Splunk Deployment so far,.. the SSL ! 

thanks and best regards,
Sekar

PS - If this or any post helped you in any way, pls consider upvoting, thanks for reading !
0 Karma
Get Updates on the Splunk Community!

Fun with Regular Expression - multiples of nine

Fun with Regular Expression - multiples of nineThis challenge was first posted on Slack #regex channel ...

[Live Demo] Watch SOC transformation in action with the reimagined Splunk Enterprise ...

Overwhelmed SOC? Splunk ES Has Your Back Tool sprawl, alert fatigue, and endless context switching are making ...

What’s New & Next in Splunk SOAR

Security teams today are dealing with more alerts, more tools, and more pressure than ever.  Join us on ...