Does Splunk's RSS feed work with https (ssl) urls?
I've set up a RSS feed on one of my hourly searches/reports.
The initial RSS (https) setup/subscription works, but I don't get updates despite frequent polling. Does the feed need to be non-ssl (http)?
This RSS feed works perfectly: http://answers.splunk.com/feeds :)
I have several RSS feeds coming out of my Splunk search head over SSL. They are all defined as part of an alert action for a scheduled search. All are SSL, all work great with my feed reader, and all show updates in the feed reader regularly.
I use Akregator, part of KDE. There was some initial suffering due to getting the SSL certificate stuff right but once that was done, it's been all good.