Using an SSL connection with the Splunk application is optional for the PowerConnect application. If you do not wish to use SSL, proceed to Create a Splunk Role. SSL setup differs between Splunk Enterprise and Splunk Cloud. Below are the instructions to for each type of environment.is enabled by default for Splunk Cloud deployments, but Splunk Enterprise may require additional setup as noted below.
Setup for Splunk Enterprise
Click on “Global Settings” under Data Inputs -->HTTP Event Collector in Splunk and click on Global Settings. Ensure the “Enable SSL” checkbox is selected if you want to use SSL connection in your environment.
...
Provide ROOT CA certificate to SAP team or server If the Splunk host does not already have a valid certificate for web connections, obtain either a ROOT CA or self-signed certificate for your Splunk environment for configuration of SSL between Splunk and the source SAP system(s). Instructions for creating the server a self-signed certificate is for the Splunk host are available here: KB 95 - Splunk – Create Self-signed SSL Certificate V2 or https://docs.splunk.com/Documentation/Splunk/8.0.3/Security/Howtoself-signcertificates
If needed, you can obtain a copy of the certificate using the steps below.
Export SSL Certificate
Start by connecting to the your Splunk server instance on port 8089 (Splunk Enterprise) or port 443 (Splunk Cloud) using HTTPS. this will show you the certificate in use.
...
Next, click “Copy to File” to export this certificate
...
Certificate creation is now complete. Next step would be to create an SAP-specific Splunk role: Create a Splunk Role.
...
Connections to Splunk Cloud should be established via port 443. SSL is enabled by default for Splunk Cloud deployments, so no changes need to be made to the Global Settings unlike Splunk Enterprise. To export the Root CA certificate for Splunk Cloud please follow the instructions below.
Note: The screenshots below may differ slightly based on the type of browser being used, but the same general steps are used. The screenshots below are from Google Chrome.
Click on the lock icon in your web browser.
...
Click on “Connection is secure”
...
Click on “Certificate is valid”
...
Click on Details
...
Click on Copy to File
...
Click Next
...
Ensure the “DER encoded binary X.509 (.CER)” option is selected and click Next
...
Click the Browse button.
...
Select the location where you want to save the certificate and click Save.
...
Click Next.
...
Click Finish. The certificate will now be available in the location you saved.
...
When the SAP team uploads When uploading the SSL certificate into the SAP system via STRUSTSSO2, please confirm the CN field reads “*.splunkcloud.com”, and that the DNS entries match the ones in the screenshot below:
...
Certificate creation matches the root domain of your Splunk instance. See the example below for Splunk Cloud.
...
SSL configuration is now complete. Next step would be to create an SAP-specific Splunk role: Create a Splunk Role.