Splunk Enterprise

How to configure/tell Splunk which CA is in use so it can trust the certificate?

rob345963
Observer

I am configuring a hostname validation TLS certificate with a self-signed certificate in splunk enterprise 9.0 and it seems to me that it cannot trust the CA

ERROR X509Verify [TelemetryMetricBuffer] - Server X509 certificate (CN=,DC=,DC=,DC=) failed validation; error=19, reason="self signed certificate in certificate chain"

the configuration is the following:

[sslConfig]
# turns on TLS certificate requirements
sslVerifyServerCert = true
# turns on TLS certificate host name validation
sslVerifyServerName = true
serverCert = <path to your server certificate>

Do you know how I can tell splunk which CA I'm using so it can trust the certificate? or how can i configure it?

Labels (1)
0 Karma
Get Updates on the Splunk Community!

Automatic Discovery Part 1: What is Automatic Discovery in Splunk Observability Cloud ...

If you’ve ever deployed a new database cluster, spun up a caching layer, or added a load balancer, you know it ...

Real-Time Fraud Detection: How Splunk Dashboards Protect Financial Institutions

Financial fraud isn't slowing down. If anything, it's getting more sophisticated. Account takeovers, credit ...

Splunk + ThousandEyes: Correlate frontend, app, and network data to troubleshoot ...

 Are you tired of troubleshooting delays caused by siloed frontend, application, and network data? We've got a ...