How to secure Splunk with Multi CA we are securing the Splunk Platform with ssl, data flow TOP as following, ufwd(subbranch)--->hfwd(subbranch)---->hfwd(global)--->indexer(global) The subbranrch and global use different CA, we have configured "hfwd(subbranch)---->hfwd(global)" and "hfwd(global)--->indexer(global)" with certificate issued by global CA successfully But the "ufwd(subbranch)--->hfwd(subbranch)" needs to secure with certificate issued by subbranch CA, we need to configure two CA on hfwd(subbranch), How to configure the CA path on hfwd(subbranch)? ... View more

HI, splunker,   I'm using Splunk_TA_nix, monitoring /var/log, and my problem is that different event types in this directory are assigned different hosts, for example The first eventtype , /var/log/messages, host is "aaabbb" “Aug 2 12:28:26 aaabbb systemd: Removed slice User Slice of pcp.” The name of the host is extracted from the event Another eventtype : /var/log/secure,host is ”CCCDDDD“ “Aug 2 08:25:42 aaabbb sshd[53313]: Accepted password for root from 192.168.3.145 port 55419 ssh2“ the host is "CCCDDD" ,which coming from splunk's default host name Please tell me how to set up a unified host name for this Add-on, using splunk's default host name CCCDDD ... View more

Hi, We need to use SSL while build connection with ms ssql server, Pls tell me how to config SSL in db connector app? how to import the certificates? ... View more