Splunk AppDynamics

How do I disable certificate validation with Node.js agent?

CommunityUser
Splunk Employee
Splunk Employee

Hi,

I am trying to find something equivalent to Javaagent's appdynamics.force.default.ssl.certificate.validation in the node.js agent. But couldn't find it in the documentation.

Kindly advise.

Thanks,

Ashish

Labels (1)
0 Karma

Kyle_Furlong
Contributor

Hi Ashish,

There is currently no way to disable this for the Node.js agent. It's possible that it will be available in the future, but we highly recommend encrypting the data transfer between controller and agent, and agent and controller through the certificateFile agent option.

Regards,

Kyle

0 Karma

CommunityUser
Splunk Employee
Splunk Employee

Thanks for the information, Kyle.

A couple of observations from my attempts to get it working:

1. The value of parameter 'certificateFile' has to be the path of the SSL certificate (file) itself, not the path of directory containing this file (as mentioned in the documentation)

2. The SSL certificate file has to be named "cacerts.jks" (only). Any other filename does not work.

A query:

The 

require("appdynamics").profile({ ..... })

 needs to be the first 'require' in the application. Is there a way to get around this (as in, have it as not the first require)?

Thanks,

Ashish

0 Karma

Kyle_Furlong
Contributor

Hey Ashish,

This is mostly a requirement, the agent instruments the require statement itself to instrument a set of common Node.js libraries. If these are require'd first, the agent instrumentation will have less opportunity to wire things up correctly. One option is to use the -r parameter with the node command to preload the appdynamics module and any of its config options and dependencies.

Please let me know in case you have any further questions or concerns.

Thanks and regards,

Kyle

0 Karma
Career Survey
First 500 qualified respondents will receive a $20 gift card! Tell us about your professional Splunk journey.
Get Updates on the Splunk Community!

Tech Talk Recap | Mastering Threat Hunting

Mastering Threat HuntingDive into the world of threat hunting, exploring the key differences between ...

Observability for AI Applications: Troubleshooting Latency

If you’re working with proprietary company data, you’re probably going to have a locally hosted LLM or many ...

Splunk AI Assistant for SPL vs. ChatGPT: Which One is Better?

In the age of AI, every tool promises to make our lives easier. From summarizing content to writing code, ...