Using mTLS to send logging to 3rd party AWS Application Load Balancer (ALB), then to Splunk

[tjackson]

Auth0 Community,

I need help for the implementation of sending the Auth0 logs to Splunk, unfortunately, I can’t use the Splunk built in module.

Instead, I will need to use mTLS going through an AWS Application Load Balancer (ALB). Could I please get help starting and support through the project from the Auth0 side. Any requirements we will need to start the project: custom domain?, enabling mTLS or outbound certificates?

I think I will need client certificate support and setup/configuration, custom webhook setup/implementation help as well (how to include the cert in the outbound header, etc…)

Any examples or documentation of how this is done would be a great start and any support would be appreciated. Links to community threads if available, etc…

Thank you,
Todd

[nik.baleca]

Hi @tjackson

Welcome to the Auth0 Community!

Regarding your implementation, I would recommend the following documentation:

• Setting up a custom domain (required for mTLS authentication)
• mTLS authentication within Auth0
• Auth0 Splunk integration for log streaming (this might not be suitable since you mentioned you want to use an AWS ALB and not stream directly to splunk)

Unfortunately, we do not have documentation or blog articles regarding implementing Auth0 with an AWS ALB. I would recommend resorting to the available documentation from AWS regarding implementing a LB for your application and streaming that information forward to Splunk.

If you have any other questions, let me know!

Kind Regards,
Nik