Splunk HF and NXlog via SSL

Tags:

#1 nktj

Did anyone manage to send logs from Splunk HF to NXlog server with SSL mutual authentication enabled? Able to share your configuration? Received an error on SSL version. Not sure it is due to Splunk HF conf or NXlog. Thanks.

#2 gahorvath Nxlog ✓
#1 nktj
Did anyone manage to send logs from Splunk HF to NXlog server with SSL mutual authentication enabled? Able to share your configuration? Received an error on SSL version. Not sure it is due to Splunk HF conf or NXlog. Thanks.

The SSL functionality in NXLog relies on the openssl library shipped by the OS in most cases.

The version of the openssl library may limit what encryption algorithms and SSL/TLS versions are available in NXLog. If the forwarder and NXLog have no common protocol and cypher options, this could result in the error you are seeing.