Skip to content

feat: add SNI configuration option for HEC TLS destinations#2966

Draft
sbylica-splunk wants to merge 22 commits intodevelopfrom
feat/sni_configuration
Draft

feat: add SNI configuration option for HEC TLS destinations#2966
sbylica-splunk wants to merge 22 commits intodevelopfrom
feat/sni_configuration

Conversation

@sbylica-splunk
Copy link
Copy Markdown
Contributor

Add SC4S_DEST_SPLUNK_HEC__SNI env var to enable TLS Server Name Indication on HEC destinations. This allows SSL/TLS passthrough load balancers to route HTTPS traffic based on the target hostname sent during the TLS handshake.

Made-with: Cursor

renovate bot and others added 22 commits February 25, 2026 10:20
…2930)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
* chore(deps): update docker/setup-qemu-action action to v4


---------

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: Karol Wrona <92540652+Kawron@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
* feat: added validation for url and token in config script. Added user and password for test command examples

* feat: added confirmation for config file creation

* feat: added numeric input validation to config tool

* feat: added --help to config tool

* feat: added more options for hardware based config tool

* feat: added some more info to config script

* feat: added IW_SIZE for UDP, refactored some code for config tool

* feat: added time zone config option for configuration script
* docs: added better docs for configuration tool
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
* fix: fix local sc4s and splunk setup for tests

* fix: add timezone information to tests

* fix: inacruate timestamp trimming

* fix: add udp ports for 514 and 5614

* fix: use latest splunk and add additional waiting time to avoid flaky test for docker splunk
* fix: Attempte to override splunk host with deviceHostName for NETSCOUT

* fix: Add dynamic host extraction and metadata for Netscout AED

* fix: Clean code

* fix: Added the fix to lite package

* fix:prevented sensitive data in logs
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
…4S (#2963)

* docs: Add Splunk Monitoring Console health check documentation for SC4S
* docs: fixed some broken examples from our docs
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Add SC4S_DEST_SPLUNK_HEC_<ID>_SNI env var to enable TLS Server Name
Indication on HEC destinations. This allows SSL/TLS passthrough load
balancers to route HTTPS traffic based on the target hostname sent
during the TLS handshake.

Made-with: Cursor
@sbylica-splunk
Copy link
Copy Markdown
Contributor Author

Pr addresses this issue: #2700

Base automatically changed from develop to main March 31, 2026 07:13
@ajasnosz ajasnosz changed the base branch from main to develop March 31, 2026 09:06
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants