Posted by jkwarren on Jan 27 2025 in Blather
Splunk is Broken
I did it, not them.
I did an upgrade recently, and during the startup script, there was a warning that SSL cert name checking was off. I thought that was weird, since I'm not using a self-signed cert, so the cert name should match the configured host. I poked a bit and I changed a thing in the server.conf or web.conf, and now things don't work.
I've tweaked the couple things that care about Splunk working so they don't care, because they stopped working after a while queuing messages to Splunk. Now they're just logging to files, but they're working again. This blog being one of them, so evidence is that it works OK since I can make this post.