Splunk Enterprise

Whats the domain name in ACM console to request SSL Certificate in case of Firehose to Splunk via CLB

akimoy
New Member

Hello Splunk team,

My deployment is pretty simple. I am using EC2 instance with Splunk Enterprise trial installed and following the https://docs.splunk.com/Documentation/AddOns/released/Firehose/ConfigureHECdistributed#collapseDeskt...

I created a CLB and pointed that 2 EC2 instances with Splunk Enterprise trial. I bought a custom domain name for instance abc123.info and created ACM certificate for domain name "abc123.info" as ACM console requires you to enter the domain name.

My questions are below:

1. Is my deployment "Indexers in AWS VPC" as per my deployment. INdexers in AWS VPC is mentione dover here https://docs.splunk.com/Documentation/AddOns/released/Firehose/Deploymentoptions

2. The Splunk doc provides SSL configuration hyperlink for enabling SSL on Load balancer  https://docs.splunk.com/Documentation/AddOns/released/Firehose/ConfigureanELB  and further hyperlinks

https://docs.aws.amazon.com/elasticloadbalancing/latest/classic/elb-create-https-ssl-load-balancer.h...

If I choose to generate SSL certificate using ACM, whats the "domain name"  for which I should be generating SSL certificate ? Please note that ACM Console requires to enter the "domain name" when provisioning SSL certificate.

My failed attempt"I tried creating custom domain name( abc.com for my domain) and requested the ACM Certificate and attach it to ELB. Also, In R53 created A record and alias with abc.com poiniting to LB DNS Host name. Its still not working for me and it throws the error "Could not connect to the HEC endpoint. The host does not match the certificate provided by the peer. Make sure that the certificate and the host are valid." "

Any help is appreciated by you guys !!! Thanks

 

 

 

 

 

 

Labels (2)
0 Karma

akimoy
New Member

Can | get an update on this please from someone in the splunk team on this or the community on this?

0 Karma
Get Updates on the Splunk Community!

.conf24 | Registration Open!

Hello, hello! I come bearing good news: Registration for .conf24 is now open!   conf is Splunk’s rad annual ...

ICYMI - Check out the latest releases of Splunk Edge Processor

Splunk is pleased to announce the latest enhancements to Splunk Edge Processor.  HEC Receiver authorization ...

Introducing the 2024 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...