Splunk Enterprise

restapi port 8089 certificate issue

martinnepolean
Explorer

Hi ,

 

We are trying to access SH through restapi but getting invalid certificate warning. How to get rid of this message and connect without any warning message. We are already using web and server certificate.

Labels (1)
Tags (2)
0 Karma

martinnepolean
Explorer

Could someone help in my issue?

0 Karma

harsmarvania57
SplunkTrust
SplunkTrust

Splunk Management Port (8089) by default use splunk default certificate and when you try to access REST API on port 8089, you'll get certificate warning issue.

To get rid of warning you need to configure internal SSL certificate or 3rd party SSL certificate for port 8089 in server.conf

0 Karma

martinnepolean
Explorer

@harsmarvania57  Can you please give sample on how to "configure internal SSL certificate "

0 Karma

harsmarvania57
SplunkTrust
SplunkTrust
0 Karma

martinnepolean
Explorer

For the people looking for solution, follow above link and request certificate from CA and update server.conf as below

[sslConfig]
sslPassword = ********
sslRootCAPath = file path of the CA public certificate
enableSplunkdSSL = true
serverCert = /opt/splunk/etc/auth/New Pem certificate

0 Karma
Get Updates on the Splunk Community!

Improve Your Security Posture

Watch NowImprove Your Security PostureCustomers are at the center of everything we do at Splunk and security ...

Maximize the Value from Microsoft Defender with Splunk

 Watch NowJoin Splunk and Sens Consulting for this Security Edition Tech TalkWho should attend:  Security ...

This Week's Community Digest - Splunk Community Happenings [6.27.22]

Get the latest news and updates from the Splunk Community here! News From Splunk Answers ✍️ Splunk Answers is ...