No Private key password was not provided. After using this command openssl x509 -in ca_provided_certificate.com.cr -out certificate.pem Mentioned the below setting in>>/application/splunk/etc/system/local/web.conf [settings] enableSplunkWebSSL = true serverCert = /application/splunk/etc/auth/splunkweb/certificate.pem
 privKeyPath =/application/splunk/etc/auth/splunkweb/server_name.key Then, I restarted the Splunk Service. The issue was fixed. Thank you for your help nickhillscpl ... View more

Hi @gcusello, Below is the result what I get if I run index=_audit | stats count BY action Please let me know what I can do next? Results action count CREATE_PASSWORD 1 EDIT_PASSWORD 3 GET_PASSWORD 27983 REMOVE_PASSWORD 1 Remote token requested 69403 accelerate_search 24761 alert_fired 330 change_authentication 2366 created 7060 db_connect_read_connection 12 db_connect_read_dbinput 8 db_connect_read_dblookup 4 db_connect_read_dboutput 4 db_connect_read_identity 4 db_connect_read_settings 3379 db_connect_update_settings 7 deleted 6921 dispatch_rest_to_indexers 58 dmc_manage_forwarders 2 edit_deployment_client 361 edit_deployment_server 2554 edit_dist_peer 435 edit_forwarders 1083 edit_health 742 edit_indexer_cluster 3491 edit_local_apps 890 edit_modinput_admon 1072 edit_modinput_perfmon 1072 edit_modinput_winhostmon 1072 edit_modinput_winnetmon 1072 edit_modinput_winprintmon 1072 edit_monitor 884 edit_notable_events 7 edit_roles 10894 edit_roles_grantable 9815 edit_scripted 481 edit_search_head_clustering 109 edit_search_schedule_priority 2240 edit_search_schedule_window 2240 edit_search_server 361 edit_server 2258 edit_sourcetypes 402 edit_splunktcp 443 edit_tcp 646 edit_tcp_stream 722 edit_telemetry_settings 1385 edit_timeline 7 edit_token_http 1637 edit_udp 481 edit_upload_and_index 802 edit_user 3780 edit_win_eventlogs 1072 edit_win_regmon 1072 edit_win_wmiconf 1072 embed_report 264 failure 9 indexes_edit 1165 license_edit 1515 list_deployment_client 443 list_deployment_server 3618 list_forwarders 1206 list_health 15260 list_inputs 544 list_search_head_clustering 658 list_workload_pools 11309 list_workload_rules 424 modified 105620 output_file 530 quota 152285 read_itsi_notable_aggregation_policy 4 read_itsi_service 28 read_session_token 46677 rest_apps_view 742 rest_properties_get 2172 restart_splunkd 435 rtsearch 37 run_collect 87161 search 3216428 select_workload_pools 92418 splunkShuttingDown 4 splunkStarting 20 success 277 ... View more