server.conf

server.conf

server.conf controls SSL settings for your Splunk server.

server.conf.spec

# Copyright (C) 2005-2007 Splunk Inc.  All Rights Reserved.  Version 3.0 
#
# This file contains possible attribute/value pairs for controlling Splunk Server configuration.
# Currently, the only options available are controlling SSL configuration.
# There is a server.conf in default bundle.  To set custom configurations, place a server.conf 
# in $SPLUNK_HOME/etc/bundles/local/ or your own custom bundle directory.
#SSL configuration details
[sslConfig]
enableSplunkdSSL = <true|false>
        * Enables/Disables SSL on the splunkd management port (8089).
        * Defaults to false.
          
enableSplunkSearchSSL = <true|false>
        * Enables/Disables SSL for SplunkWeb.
        * If set to true, you must specify https:// to get to SplunkWeb.
        * Defaults to false.
          
keyfile = <filename>
        * Server certificate file. 
        * Certificates are auto-generated by splunkd upon starting Splunk.
        * You may replace the default cert with your own PEM format file.
        * Certs are stored in caPath (see below).
        * Default is server.pem.
        
keyfilePassword = <password>
        * Server certificate password.
        * Default is password.
caCertFile = <filename>
        * Public key of the signing authority.
        * Default is cacert.pem.
caPath = <path>
        * path where all these certs are stored.
        * Default is $SPLUNK_HOME/etc/auth.
        
certCreateScript = <script name>
        * Creation script for generating certs on startup 
          of Splunk.
        * Default is genSignedServerCert.sh

server.conf.example

# Copyright (C) 2005-2007 Splunk Inc.  All Rights Reserved.  Version 3.0 
# The following is an example of SSL configuration.
# To use this configuration, copy the configuration block into
# server.conf in $SPLUNK_HOME/etc/bundles/local/ (or your own custom bundle).
[sslConfig]
enableSplunkdSSL = true
enableSplunkSearchSSL = true
keyfile = server.pem
keyfilePassword = password
caCertFile = cacert.pem
caPath = $$SPLUNK_HOME/etc/auth
certCreateScript = genSignedServerCert.sh
[managementServer]
maxBackLog = 100

• Was this topic useful?
• Post a comment