We will be using the Splunk add-on from VMWare. I am just trying to wrap my head around the certs to do this. I understand from the VMWare pages what our guys have to do at the command line to enable the TLS protocol and what certs to send. (As well as what logging will be sent.) I know from the Splunk notes that the three certs to be sent will be combined on the Splunk side and in what order they need to be done. I am just still a little confused as to how on the Splunk side, the VMWare add-on will be using that combined cert. Very respectfully, James ... View more

Hey there. I do appreciate the reply. As I said, we need to have the NSX-T use TLS to forward the logs to Splunk. Very respectfully, James ... View more

Somewhat. I am already familiar with the universal forwarder. In this case, it's very specific. We need to have NSX-T use TLS to send its logs to Splunk. And yes, I have been researching and reading individual blogs and sites. Very respectfully, James ... View more