Required parameters DA and Kafka connections when using SSL/TLS
Article ID: 268265
Updated On:
Products
Issue/Introduction
We are connecting to a Kafka server for data export using SSL/TLS. What parameters are required for the configuration?
What are the configuration requirements for successful DA to Kafka server communication when SSL/TLS is in use?
Environment
All supported DX NetOps Performance Management releases
Resolution
In the $DataAggregator_Home/apache-karaf/etc/kafkaexport.producer.cfg file on the Data Aggregator host the following is required.
producer.bootstrap.servers=kafkaservername\:PORT
feature.enabled=on
topic=metric-export
producer.security.protocol=SSL
producer.ssl.keystore.location=<path_to_keystore>
producer.ssl.keystore.password=<password>
producer.ssl.key.password=<password>
producer.ssl.truststore.location=<path_to_truststore>
producer.ssl.truststore.password=<password>
It is required to provide a keystore/truststore that includes a trusted certificate that can be used to access Kafka.
See the Configure the Kafka Producer Config File section of the Configure Streaming Metric Export to a Kafka Cluster documentation topic for additional details.
Additional Information
Kafka producer config entries are prepended with "producer." in the kafkaexport.producer.cfg, these should be limited to what is needed for SSL/TLS| Authentication
Feedback
