Hi, I have this set up: Splunk enterprise with stream enabled set up on a VM Splunk forwarder on my windows machine which works for now without SSL   I want to implement the ability to read the https also. But I'm not sure what to do when reading https://docs.splunk.com/Documentation/StreamApp/latest/DeployStreamApp/EnableSSLforStreamForwarder   Has anyone here set up ssl on stream on windows machines (not servers) and how did you do it? ... View more

    Setup: Splunk enterprise is on a VM, everything works fine 1 workstation had a universal forwarder   Problem: I need them to talk to eachother on the stream part.   What I have done until now: (Splunk VM)I have added the stream app for splunk enterprise and restartet (Workstation)I have added the stream app manually to C:\SplunkUniversalForwarder\etc\apps\Splunk_TA_stream (Workstation)I have added into inputs.conf "splunk_stream_app_location =https://192.168.1.115:8000/en-us/custom/splunk_app_stream/" (Workstation)I have not added anything on the workstation to streamfwd   When I come to (Splunk VM) - I am lost:   What am I doing wrong?   Install of splunk stream into splunk enterprise (VM) was done with normal config, in other words I haven't changed where apps are installed, so everything is standard there.  I have tried to read: https://docs.splunk.com/Documentation/StreamApp/7.3.0/DeployStreamApp/ConfigureStreamForwarder   But I'm not getting what I'm doing wrong here.    Any suggestions please? thx ... View more

    Hi, I have had this problem twice now on two different computers.    I install debian/ubuntu  Then I use the .deb file from splunk.com - the newest you get when you start your trial I then make a VM based on a distro of ubuntu/debian and install Everything workes fine, I use my own user, not the root user to install I follow the steps of https://www.bitsioinc.com/tutorials/install-splunk-linux/  Splunk starts and works fine. No problems..until I restart the VM. Then localhost:8000 and the external ip both stop working and splunk web gui is not possible to connect to. I use the same account both for installation and for login when restarting   What am I doing wrong? Other VM's don't report problems on the machine, its only splunk, and only after restarting of the vm. The VM itself has internet and works fine, its only splunk that has issues.    ... View more