RapidMiner

Learner III sangyub
Learner III

Connection error of Splunk extension

Hi 

 

I need to connect to Splunk with RapidMiner. So I installed Splunk extension and tried to connect, but it's fail.

It's the message when I clicked test button.

20170317_114058.png

let me know your good answers

Thanks

2 REPLIES
RM Certified Expert
RM Certified Expert

Re: Connection error of Splunk extension

I'm not the Splunk exper here, maybe @Marco_Boeck can chime in.

Newbie tzzjchao
Newbie

Re: Connection error of Splunk extension

我这边出现同样问题,现已解决。

1.  先解决协议不匹配(题主情况)

解决办法:屏蔽掉java 8默认关闭的sslv3

找到java.security,一般在安装目录jre/lib/security/java.security中,找到

Screenshot from 2017-08-23 01-32-59.png

这里默认disable掉sslv3,但是rapidminer ssl版本比较低,所以协议不对。注释掉这行就可以解决。

2. 解决协议匹配不对问题之后,我这边出现shadehand failture,查splunk log中发现协议版本不对

解决办法:

找到splunk sever配置(我这边目录是:/opt/splunk/etc/system/local ),打开server.conf,在[sslConfig] 中加入以下配置内容:

enableSplunkdSSL = true
sslVersions = *,-ssl2
sslVersionsForClient = *,-ssl2
cipherSuite = TLSv1+HIGH:TLSv1.2+HIGH:@STRENGTH

 

3. 重启splunk应用服务,rapidminer,重新链接就可以链接成功了。

Twitter Feed