11-09-2021 04:44 AM
upon enabling the reporting service on the indexer (reporting appliance), i am getting error 'indexer reporting service failed'.
upon checking theg config.
debug logs, i can see below,
didnt get pid for splunk_primary
generate/fetch CA cert in directory /infoblox/var/reporting/certs'
Ca cert not available from database......
not continuing with reporting config....
Is this due to traffic decryption or any inspection ?
is there any need to generate and apply certificates even there is no decryption in network ( by default is it mandatory ?, i have a setup running fine without needing to create new certs.. looks like infoblox is using default ones.