Splunk Enterprise

中間転送についてAbout intermediate transfer

どらく
Explorer

HeavyforwarderをIntermediateForwarderとして使用し、UF→HF→SplunkCloudのような構成をするとき、UFから来たデータを転送するためにはHFでどのような設定を行う必要があるのでしょうか。

ウェブ上にあまり載っていないので、お答えいただけたら幸いです。

When using Heavyforwarder as IntermediateForwarder and configuring like UF → HF → SplunkCloud, what kind of settings need to be made on HF to forward data coming from UF?

I would appreciate it if you could answer as there is not much on the web.

*Translated by the Splunk community Team*

Labels (1)
Tags (1)
0 Karma

richgalloway
SplunkTrust
SplunkTrust
0 Karma

どらく
Explorer

I tried to follow the answer and found that the data could not be transferred.

The cause was that the client's certificate is not trusted for TLS communication.

Do you know how to solve this?

0 Karma
Get Updates on the Splunk Community!

Archived Metrics Now Available for APAC and EMEA realms

We’re excited to announce the launch of Archived Metrics in Splunk Infrastructure Monitoring for our customers ...

Detecting Remote Code Executions With the Splunk Threat Research Team

WATCH NOWRemote code execution (RCE) vulnerabilities pose a significant risk to organizations. If exploited, ...

Enter the Dashboard Challenge and Watch the .conf24 Global Broadcast!

The Splunk Community Dashboard Challenge is still happening, and it's not too late to enter for the week of ...