This seems a little bizarre. I'm not sure how Splunk could ever not use a private key - otherwise what stops me just downloading the google.com cert and using that for my HEC? I found this blog which does use the private key and works for me https://support.uberagent.com/hc/en-us/articles/212656725-Enable-HTTPS-for-Splunk-HTTP-Event-Collector ... View more

melcher, i'm a little unclear on the files here. I have a certificate, a chain (intermediate certs) and a private key. The private key is password protected. How does this relate to the options caCertFile, serverCert and sslPassword? I see no option to specify the path to my private key. ... View more