Hello!
What are the passphrases for the client.pem and server.pem files in the Universal Forwarder Credentials file, splunkclouduf.spl ?
I've tried the following passphrases without success:
my Splunk account password. It had the maximum allowed characters, 64.
changeme
updating my password to something simpler in https://www.splunk.com/my-account/en_us#/profile-details , re-downloading the splunkclouduf.spl and trying new password for the passphrase with this command: openssl rsa -in client.pem -out no_client.pem .
Thank you in advance!
P.S. For a little background, I'm trialing Splunk Cloud. I'm trying to send logs from my kubernetes cluster to Splunk Cloud using https://github.com/splunk/splunk-connect-for-kubernetes.
I've opened a Splunk account, created the indexes and downloaded the Universal Forwarder Credentials file, splunkclouduf.spl and untarred it which produced the 5 files: cacert.pem , client.pem , limits.conf , outputs.conf and server.pem .
The problem is that the .pem files have passphrases. So setting just setting them in the global.splunk.hec.clientCert , global.splunk.hec.clientKey and global.splunk.hec.caFile settings is producing TLS errors.
... View more