upon enabling the reporting service on the indexer (reporting appliance), i am getting error 'indexer reporting service failed'.
upon checking theg config.
debug logs, i can see below,
--
didnt get pid for splunk_primary
generate/fetch CA cert in directory /infoblox/var/reporting/certs'
Ca cert not available from database......
not continuing with reporting config....
--
Is this due to traffic decryption or any inspection ?
is there any need to generate and apply certificates even there is no decryption in network ( by default is it mandatory ?, i have a setup running fine without needing to create new certs.. looks like infoblox is using default ones.
