Security

Splunk certificates required for 3rd Party Application?

kartik13
Communicator

I am making a 3rd party application using Splunk API . I noticed that in server.conf, by toggling the enableSplunkdSSL to true or false secure or unsecure the splunkd port. However, I am not at all friendly with the certs. I need some help regarding certs. I need to make a request to https management port. After adding the default cert to the browser. I can access it, but through the application, I cannot. So to add those certs in the application, which file do I need to add in my application, and how to create those files with the default cert which I am getting from the browser?
How can I import those certs in my application?

Thanks in advance
Regards

0 Karma
1 Solution

kartik13
Communicator

Finally got the answer.

Splunkweb communicates to splunkd port through self-signed certificates. When i was making a call from node.js to the self signed certificate https port, it was giving me a certificate error(deduced by the rules and regulations of CORS). So i finally allowed my server to make calls to the self signed certificate https service.And you are done

I added this line in node.js to allow the server
process.env.NODE_TLS_REJECT_UNAUTHORIZED = "0";

View solution in original post

kartik13
Communicator

Finally got the answer.

Splunkweb communicates to splunkd port through self-signed certificates. When i was making a call from node.js to the self signed certificate https port, it was giving me a certificate error(deduced by the rules and regulations of CORS). So i finally allowed my server to make calls to the self signed certificate https service.And you are done

I added this line in node.js to allow the server
process.env.NODE_TLS_REJECT_UNAUTHORIZED = "0";

Get Updates on the Splunk Community!

Splunk Search APIを使えば調査過程が残せます

   このゲストブログは、JCOM株式会社の情報セキュリティ本部・専任部長である渡辺慎太郎氏によって執筆されました。 Note: This article is published in both Japanese ...

Integrating Splunk Search API and Quarto to Create Reproducible Investigation ...

 Splunk is More Than Just the Web Console For Digital Forensics and Incident Response (DFIR) practitioners, ...

Congratulations to the 2025-2026 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...