Splunk Enterprise

中間転送についてAbout intermediate transfer

どらく
Explorer

HeavyforwarderをIntermediateForwarderとして使用し、UF→HF→SplunkCloudのような構成をするとき、UFから来たデータを転送するためにはHFでどのような設定を行う必要があるのでしょうか。

ウェブ上にあまり載っていないので、お答えいただけたら幸いです。

When using Heavyforwarder as IntermediateForwarder and configuring like UF → HF → SplunkCloud, what kind of settings need to be made on HF to forward data coming from UF?

I would appreciate it if you could answer as there is not much on the web.

*Translated by the Splunk community Team*

Labels (1)
Tags (1)
0 Karma

richgalloway
SplunkTrust
SplunkTrust
0 Karma

どらく
Explorer

I tried to follow the answer and found that the data could not be transferred.

The cause was that the client's certificate is not trusted for TLS communication.

Do you know how to solve this?

0 Karma
Career Survey
First 500 qualified respondents will receive a $20 gift card! Tell us about your professional Splunk journey.
Get Updates on the Splunk Community!

Tech Talk Recap | Mastering Threat Hunting

Mastering Threat HuntingDive into the world of threat hunting, exploring the key differences between ...

Observability for AI Applications: Troubleshooting Latency

If you’re working with proprietary company data, you’re probably going to have a locally hosted LLM or many ...

Splunk AI Assistant for SPL vs. ChatGPT: Which One is Better?

In the age of AI, every tool promises to make our lives easier. From summarizing content to writing code, ...