Splunk: How to enable Splunk SSO

General
, , ,
1

I have splunk and try to enable splunk SSO instead of nornal authentiation. I have configuraitons as follows:

In /opt/splunk/etc/system/local/server.conf

[general]
trustedIP = 192.168.1.208
serverName = Splunk_Core_02
pass4SymmKey = $7$RRvdYDdIlj4P2geQdtHluTRb7OfvZhTFTZGJ7z5JiZAkJ6Q1at6j0Q==
sessionTimeout = 30s

[sslConfig]
sslPassword = $7$m6pB5a0PWFg64VlNZGgunhGElO3qLiAc6NrhfLO+tpX2jR7WC7qm1Q==

[lmpool:auto_generated_pool_download-trial]
description = auto_generated_pool_download-trial
quota = MAX
slaves = *
stack_id = download-trial

[lmpool:auto_generated_pool_forwarder]
description = auto_generated_pool_forwarder
quota = MAX
slaves = *
stack_id = forwarder

[lmpool:auto_generated_pool_free]
description = auto_generated_pool_free
quota = MAX
slaves = *
stack_id = free

[license]
active_group = Enterprise

[diskUsage]
minFreeSpace = 1024

[lmpool:test_splunk]
quota = MAX
slaves = *
stack_id = enterprise

In /opt/splunk/etc/system/local/web.conf

I see http://192.168.1.208:8000/debug/sso page, I see SSO is not enabled. What’s wrong with my configurations?

2

@johns693 Could you check the available Pega documentation on the methods available for this type of integration?

The below posts show you some suggestions:

How to read MDC fields using custom appender | Support Center.

PRPC OOTB supports many integration protocols like SOAP, REST, JMS etc. So it depends upon splunk which way it accepts the request

You may need to create a custom appender.

For splunk-specific configuration could you check external articles such as this one as that does not appear to be pega-specific?