Connection error of Splunk extension

sangyubsangyub Member Posts: 1 Contributor I
edited November 2018 in Help

Hi 

 

I need to connect to Splunk with RapidMiner. So I installed Splunk extension and tried to connect, but it's fail.

It's the message when I clicked test button.

20170317_114058.png

let me know your good answers

Thanks

Answers

  • Thomas_OttThomas_Ott RapidMiner Certified Analyst, RapidMiner Certified Expert, Member Posts: 1,761 Unicorn

    I'm not the Splunk exper here, maybe @Marco_Boeck can chime in.

  • tzzjchaotzzjchao Member Posts: 1 Contributor I

    我这边出现同样问题,现已解决。

    1.  先解决协议不匹配(题主情况)

    解决办法:屏蔽掉java 8默认关闭的sslv3

    找到java.security,一般在安装目录jre/lib/security/java.security中,找到

    Screenshot from 2017-08-23 01-32-59.png

    这里默认disable掉sslv3,但是rapidminer ssl版本比较低,所以协议不对。注释掉这行就可以解决。

    2. 解决协议匹配不对问题之后,我这边出现shadehand failture,查splunk log中发现协议版本不对

    解决办法:

    找到splunk sever配置(我这边目录是:/opt/splunk/etc/system/local ),打开server.conf,在[sslConfig] 中加入以下配置内容:

    enableSplunkdSSL = true
    sslVersions = *,-ssl2
    sslVersionsForClient = *,-ssl2
    cipherSuite = TLSv1+HIGH:TLSv1.2+HIGH:@STRENGTH

     

    3. 重启splunk应用服务,rapidminer,重新链接就可以链接成功了。

  • Marco_BoeckMarco_Boeck Administrator, Moderator, Employee, Member, University Professor Posts: 1,991 RM Engineering

    Hi,

     

    Splunk Extension version 8.2.0 was released today and should fix the issue.

     

    Regards,

    Marco

    sgenzer
Sign In or Register to comment.