Are you a member of the Splunk Community?
- Find Answers
- :
- Splunk Platform
- :
- Splunk Enterprise
- :
- restapi port 8089 certificate issue
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark Topic
- Subscribe to Topic
- Mute Topic
- Printer Friendly Page
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
restapi port 8089 certificate issue
Hi ,
We are trying to access SH through restapi but getting invalid certificate warning. How to get rid of this message and connect without any warning message. We are already using web and server certificate.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Could someone help in my issue?
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Splunk Management Port (8089) by default use splunk default certificate and when you try to access REST API on port 8089, you'll get certificate warning issue.
To get rid of warning you need to configure internal SSL certificate or 3rd party SSL certificate for port 8089 in server.conf
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
@harsmarvania57 Can you please give sample on how to "configure internal SSL certificate "
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Have a look ta this https://docs.splunk.com/Documentation/Splunk/8.0.4/Security/AboutsecuringyourSplunkconfigurationwith... and you'll get idea
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
For the people looking for solution, follow above link and request certificate from CA and update server.conf as below
[sslConfig]
sslPassword = ********
sslRootCAPath = file path of the CA public certificate
enableSplunkdSSL = true
serverCert = /opt/splunk/etc/auth/New Pem certificate
Index This | When is October more than just the tenth month?
Observe and Secure All Apps with Splunk
What’s New & Next in Splunk SOAR
