Splunk Enterprise

restapi port 8089 certificate issue

martinnepolean
Explorer

Hi ,

 

We are trying to access SH through restapi but getting invalid certificate warning. How to get rid of this message and connect without any warning message. We are already using web and server certificate.

Labels (1)
Tags (2)
0 Karma

martinnepolean
Explorer

Could someone help in my issue?

0 Karma

harsmarvania57
SplunkTrust
SplunkTrust

Splunk Management Port (8089) by default use splunk default certificate and when you try to access REST API on port 8089, you'll get certificate warning issue.

To get rid of warning you need to configure internal SSL certificate or 3rd party SSL certificate for port 8089 in server.conf

0 Karma

martinnepolean
Explorer

@harsmarvania57  Can you please give sample on how to "configure internal SSL certificate "

0 Karma

harsmarvania57
SplunkTrust
SplunkTrust
0 Karma

martinnepolean
Explorer

For the people looking for solution, follow above link and request certificate from CA and update server.conf as below

[sslConfig]
sslPassword = ********
sslRootCAPath = file path of the CA public certificate
enableSplunkdSSL = true
serverCert = /opt/splunk/etc/auth/New Pem certificate

0 Karma
.conf21 CFS Extended through 5/20!

Don't miss your chance
to share your Splunk
wisdom in-person or
virtually at .conf21!

Call for Speakers has
been extended through
Thursday, 5/20!