Skip to main content
Solved

Which TLS certs are used for syslog in Cribl Cloud?

  • March 11, 2025
  • 2 replies
  • 52 views
T

In a cribl cloud deployment, what certificate do we use for TLS for syslog?

Best answer by Martin Prado

Cribl Cloud TLS Cert docs have moved here. In Cloud, we provide a pre-configured TLS Cert that can be used for any new source. Specify the following settings within the TLS Settings tab.

https://docs.cribl.io/stream/securing-and-monitoring/#tls-cloud

TLS in Cribl.Cloud​

TLS encryption is pre-enabled on several Sources in Cribl.Cloud, indicated on the Cribl.Cloud portal's Data Sources tab. All TLS is terminated by individual Nodes.

To enable TLS settings for additional Sources, use these configuration settings:

  • Private key path: /opt/criblcerts/criblcloud.key
  • CA certificate path: /opt/criblcerts/criblcloud.crt
  • Minimum TLS version: TLSv1.2

Currently, Cribl.Cloud does not enable you to import your own certificates for mutual TLS authentication. Cribl.Cloud uses TLS to provide encryption in the wire, but leaves authentication at the protocol layer – e.g., Splunk HEC or S2S tokens, Kafka authorization, etc.

    2 replies

    P
    • pie
    • Participating Frequently
    • March 11, 2025

    the documentation for Data Sources, Ports and TLS settings is here:
    LogStream Cloud Deployment

    M
    • Martin Prado
    • Employee
    • Answer
    • March 11, 2025

    Cribl Cloud TLS Cert docs have moved here. In Cloud, we provide a pre-configured TLS Cert that can be used for any new source. Specify the following settings within the TLS Settings tab.

    https://docs.cribl.io/stream/securing-and-monitoring/#tls-cloud

    TLS in Cribl.Cloud​

    TLS encryption is pre-enabled on several Sources in Cribl.Cloud, indicated on the Cribl.Cloud portal's Data Sources tab. All TLS is terminated by individual Nodes.

    To enable TLS settings for additional Sources, use these configuration settings:

    • Private key path: /opt/criblcerts/criblcloud.key
    • CA certificate path: /opt/criblcerts/criblcloud.crt
    • Minimum TLS version: TLSv1.2

    Currently, Cribl.Cloud does not enable you to import your own certificates for mutual TLS authentication. Cribl.Cloud uses TLS to provide encryption in the wire, but leaves authentication at the protocol layer – e.g., Splunk HEC or S2S tokens, Kafka authorization, etc.

    Terms & ConditionsAccessibility statement