Splunk Enterprise Security

KV Store initialization failed. Please contact your system administrator

krvamsireddy
Explorer

KV Store initialization failed. Please contact your system administrator

Unable to initialize modular input "microsoft_graph_security" defined in the app "TA-microsoft-graph-security-add-on-for-splunk": Unable to locate suitable script for introspection..

Tags (1)
0 Karma

anilchaithu
Builder

@krvamsireddy 

From the logs it is clear that the cert was expired and you need to generate a new server cert.

  • Check the validity of the cert using below command. This should give you the end data of the cert
openssl x509 -noout -enddate -in /opt/splunk/etc/auth/server.pem
  • To generate a new ssl cert

 

/opt/splunk/bin/splunk createssl server-cert 3072 -d /opt/splunk/etc/auth -n server -c <FQDN>

 

  • Restart splunk
  • check kvstore status

 

/opt/splunk/bin/splunk show kvstore-status

 

 

-- Hope this Helps

krvamsireddy
Explorer

net.ssl.sslCipherConfig is deprecated. It will be removed in a future release.

 2020-11-23T06:21:24.238Z F NETWORK  [main] The provided SSL certificate is expired or not yet valid.

 2020-11-23T06:21:24.238Z F -        [main] Fatal Assertion 28652 at src/mongo/util/net/ssl_manager.cpp 1120

 2020-11-23T06:21:24.238Z F -        [main]

 ***aborting after fassert() failure

 2020-11-23T13:44:48.109Z W CONTROL  [main] net.ssl.sslCipherConfig is deprecated. It will be removed in a future release.

 2020-11-23T13:44:48.122Z F NETWORK  [main] The provided SSL certificate is expired or not yet valid.

 2020-11-23T13:44:48.122Z F -        [main] Fatal Assertion 28652 at src/mongo/util/net/ssl_manager.cpp 1120

 

0 Karma
Get Updates on the Splunk Community!

Extending Observability Content to Splunk Cloud

Register to join us !   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to ...

What's new in Splunk Cloud Platform 9.1.2312?

Hi Splunky people! We are excited to share the newest updates in Splunk Cloud Platform 9.1.2312! Analysts can ...

What’s New in Splunk Security Essentials 3.8.0?

Splunk Security Essentials (SSE) is an app that can amplify the power of your existing Splunk Cloud Platform, ...