Security

Webhook SSL/HTTPS

chriswessel1
Engager

Hi,

we are developing a solution that uses timed searches to trigger a webhook to call an application API and take some action on our system.

In our development environments, the app is not secured via HTTPS, and Splunk can successfully contact our app via HTTP.
We are having difficulty after migrating this code to a higher environment that IS secured by HTTPS.

Can splunk Webhooks utilize HTTPS? if so, is the communication 1-way (Splunk server needs our app's certs) or 2-way (both apps need each other's certs).

geetha_v1
Engager

We too have a similar requirement, to invoke https application api from webhook. Kindly share if you figured any solution?

mrdoggie
Engager

Having similar problem here. Still figuring out what should I do to achieve this. As far as my colleagues and I know, splunk webhooks could only send HTTP request. In order to achieve 1-way or mutual tls, you would need to start a server yourself, and wrap the splunk services, so no more good looking interface for you any more. Unfortunately, I could not find much information on this. It will be great if any one could point us to the direction.

,Having similar problem here. Still figuring out what should I do to achieve this. As far as my colleagues and I know, splunk webhooks could only send HTTP request. In order to achieve 1-way or mutual tls, you would need to start a server yourself, and wrap the splunk service, so no more good looking interface for you any more. Unfortunately, I could not find much information on this. It will be great if any one could point us to the direction.

Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Meet the .conf26 AI Agent Buildathon Winners

At the .conf26 AI Agent Buildathon, Splunk users turned their operational expertise into working AI agents ...

Trusted Autonomy in the SOC: A Maturity Journey

AI is compressing attacker timelines and pushing SOC teams beyond human capacity thresholds. The next SOC ...

Supercharging Windows Security Detection Performance: Introducing Hybrid Field ...

Windows event logs—from Security auditing and Sysmon to PowerShell script blocks—form the operational backbone ...