Security

Splunk certificates required for 3rd Party Application?

kartik13
Communicator

I am making a 3rd party application using Splunk API . I noticed that in server.conf, by toggling the enableSplunkdSSL to true or false secure or unsecure the splunkd port. However, I am not at all friendly with the certs. I need some help regarding certs. I need to make a request to https management port. After adding the default cert to the browser. I can access it, but through the application, I cannot. So to add those certs in the application, which file do I need to add in my application, and how to create those files with the default cert which I am getting from the browser?
How can I import those certs in my application?

Thanks in advance
Regards

0 Karma
1 Solution

kartik13
Communicator

Finally got the answer.

Splunkweb communicates to splunkd port through self-signed certificates. When i was making a call from node.js to the self signed certificate https port, it was giving me a certificate error(deduced by the rules and regulations of CORS). So i finally allowed my server to make calls to the self signed certificate https service.And you are done

I added this line in node.js to allow the server
process.env.NODE_TLS_REJECT_UNAUTHORIZED = "0";

View solution in original post

kartik13
Communicator

Finally got the answer.

Splunkweb communicates to splunkd port through self-signed certificates. When i was making a call from node.js to the self signed certificate https port, it was giving me a certificate error(deduced by the rules and regulations of CORS). So i finally allowed my server to make calls to the self signed certificate https service.And you are done

I added this line in node.js to allow the server
process.env.NODE_TLS_REJECT_UNAUTHORIZED = "0";

Get Updates on the Splunk Community!

Fun with Regular Expression - multiples of nine

Fun with Regular Expression - multiples of nineThis challenge was first posted on Slack #regex channel ...

[Live Demo] Watch SOC transformation in action with the reimagined Splunk Enterprise ...

Overwhelmed SOC? Splunk ES Has Your Back Tool sprawl, alert fatigue, and endless context switching are making ...

What’s New & Next in Splunk SOAR

Security teams today are dealing with more alerts, more tools, and more pressure than ever.  Join us on ...