Security

Splunk certificates required for 3rd Party Application?

kartik13
Communicator

I am making a 3rd party application using Splunk API . I noticed that in server.conf, by toggling the enableSplunkdSSL to true or false secure or unsecure the splunkd port. However, I am not at all friendly with the certs. I need some help regarding certs. I need to make a request to https management port. After adding the default cert to the browser. I can access it, but through the application, I cannot. So to add those certs in the application, which file do I need to add in my application, and how to create those files with the default cert which I am getting from the browser?
How can I import those certs in my application?

Thanks in advance
Regards

0 Karma
1 Solution

kartik13
Communicator

Finally got the answer.

Splunkweb communicates to splunkd port through self-signed certificates. When i was making a call from node.js to the self signed certificate https port, it was giving me a certificate error(deduced by the rules and regulations of CORS). So i finally allowed my server to make calls to the self signed certificate https service.And you are done

I added this line in node.js to allow the server
process.env.NODE_TLS_REJECT_UNAUTHORIZED = "0";

View solution in original post

kartik13
Communicator

Finally got the answer.

Splunkweb communicates to splunkd port through self-signed certificates. When i was making a call from node.js to the self signed certificate https port, it was giving me a certificate error(deduced by the rules and regulations of CORS). So i finally allowed my server to make calls to the self signed certificate https service.And you are done

I added this line in node.js to allow the server
process.env.NODE_TLS_REJECT_UNAUTHORIZED = "0";

Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Your Feedback. Our Roadmap. Visit the PX Feedback Booth at .conf26

You use Splunk every day, come and help shape what's next.  Save Your Seat: Product-Focused Sessions at ...

Agentic SOC Triage: Investigating Splunk ES Notables with MCP Server and a Local LLM

The Problem: Too Many Alerts, Too Little Context Security operations teams running Splunk Enterprise Security ...

Painting a Clearer Picture: Creating Cross-Domain Visibility with AI Canvas

Watch Now Painting a Clearer Picture: Creating Cross-Domain Visibility with AI Canvas     Do you ever feel ...