以下のサイトを参考にsplunkを構築しております。
上記サイトの「AppをIndexerに配布する場合」のところの認証でうまくいかず困っております。
実行コマンドと結果:
# sudo -u splunk /opt/splunk/bin/splunk validate cluster-bundle -auth admin:aaaaaaa
Validating new bundle. Please run 'splunk show cluster-bundle-status' to check the status of the bundle validation.
WARNING: Server Certificate Hostname Validation is disabled. Please see server.conf/[sslConfig]/cliVerifyServerName for details.
server.confの一部を追加してapplyしてみる
[sslConfig]
cliVerifyServerName = false
実行コマンドと結果:
# sudo -u splunk /opt/splunk/bin/splunk apply cluster-bundle sudo -u splunk /opt/splunk/bin/splunk apply cluster-bundle --skip-validation
WARNING: Server Certificate Hostname Validation is disabled. Please see server.conf/[sslConfig]/cliVerifyServerName for details.
Encountered some errors while applying the bundle.
The cluster manager could not push the latest configuration bundle because it contains an invalid configuration. Fix any errors and push the bundle again. If you want to 'apply' this bundle without validation, you can skip the validation process like this: "splunk apply cluster-bundle --skip-validation". Use this option carefully, as it can cause the cluster manager to push an invalid configuration to the peers. The following errors were encountered:
--skip-validation
つけたんだけど…お叱りを受けます。
解決方法をご存じの方、お手数をおかけしますが、ご教授頂けないでしょうか。よろしくお願い致します