Authentication errors
-
- UpdatedAug 1, 2024
- 1 minute read
- Xanadu
- Splunk Enterprise Security Event Ingestion Integration
This section describes some common authentication errors and how they can be resolved.
Certificate validation issue
If an error occurs during authentication, you may see the following screen:
If you have verified that your API account credentials and the Splunk Base URL information are correct, this error may be due to an issue with the Splunk certificate for the port 8089 communication. ServiceNow® instance requires a valid certificate with a common name that matches the server host name to establish secure connections. For more information, see Certificates. If you see this error, you can verify that the issue is due to a certificate problem by viewing the system logs.
An error condition similar to the following will likely appear:
To proceed with the authentication, you must replace the Splunk default certificate that is provided for API access on port 8089. For detailed instructions on how to replace the SSL certificate, see KB0778285.