topic Re: Remote access in Deployment Architecture

Remote access

tamtamnoob — Sun, 19 May 2013 03:35:22 GMT

Hi, i am new to splunk , so there is a few question i would like to ask. I got two computer A and B.
Computer A is install with splunk. How should i configure my computer so that i am able to access my splunk content(installed in computer A) using computer B remotely. Thanks!

Re: Remote access

BobM — Sun, 19 May 2013 07:31:16 GMT

Splunk is accessed with a browser so any computer on your network should be able to connect to it provided you don't have firewalls blocking them. If you haven't made any changes, point your browser to port 8000 on the other computer.

http://computerA.mycompany.com:8000

Re: Remote access

tamtamnoob — Sun, 19 May 2013 07:54:05 GMT

Hi, for example, the broswer appear on computer A is world:8000. So at the computer B i should type
http://world:8000 ??

Re: Remote access

BobM — Sun, 19 May 2013 08:11:59 GMT

If the network knows that computer by the name world then yes. Quite often a computer will use a name for itself that the network does not understand and this may be the case here. If this is on a private network you may have to use the ip address.

To find out the computers ip address open a cmd, dos or terminal window and run the command

ipconfig

You wil see a set of 4 numbers seperated by dot probably starting 192.168. Use this in place of the computer name.

Re: Remote access

tamtamnoob — Sun, 19 May 2013 08:47:04 GMT

even i key in the ipadress 192.168.XX.XX:8000 on the broswer. the google prompt me Oops! Google Chrome could not connect to 192.168.XX.XX:8000

Re: Remote access

tamtamnoob — Sun, 19 May 2013 08:51:07 GMT

i also visit this website http://www.dummies.com/how-to/content/how-to-open-a-port-in-the-windows-7-firewall.html on how to allow port 8000

Re: Remote access

tamtamnoob — Sun, 19 May 2013 09:18:18 GMT

Hi , using server .conf and putting the allowRemoteLogin = Always. i can use computer B to access the splunk of computer A under the same network . Is it possible to access it with different network?

Re: Remote access

Ayn — Sun, 19 May 2013 10:14:37 GMT

This is starting to fall more under general networking queries than Splunk.

Re: Remote access

Ayn — Sun, 19 May 2013 10:17:32 GMT

Also allowRemoteLogin in server.conf has nothing to do with Splunk's web interface, it controls access to splunkd (which if you do not know what it is you likely don't need to at this time either).

Re: Remote access

tamtamnoob — Sun, 19 May 2013 10:20:12 GMT

So how can i access the splunk of computer A from computer B from different network? it seems that i can only access it under the same network

Re: Remote access

Ayn — Sun, 19 May 2013 11:18:03 GMT

Same way you would access any other service on your network. How you would go about doing that varies wildly depending on your network setup. Again, this is not really a Splunk issue so you should post this question with details on your network setup in a forum that deals with this kind of issues.

Re: Remote access

techieg — Wed, 29 Oct 2014 12:07:43 GMT

I had this issue and after creating an inbound rule to allow TCP port 8000 on the firewall on the system where Splunk is installed. For an "Enterprise" product, one would think simple check boxes will make this happen, same goes for issues everyone is having discovering and getting data from remote machines, even on a Windows AD domain controller. Not so "enterprise", if you ask me.

Re: Remote access

MuS — Wed, 29 Oct 2014 12:17:16 GMT

I think you messed some things up here: allowRemoteLogin only controls logins to the splunkd deamon not the Web UI and any needed firewall rule is purely OS related.

Re: Remote access

techieg — Wed, 29 Oct 2014 12:33:19 GMT

MuS, you may be right. I removed the allowRemoteLogin entry form server.conf and am still able to remotely access splunk web UI. I guess its simply having to allow inbound traffic to port 8000 (or whatever you may change it to in Splunk) in the firewall on the system hosting Splunk. I have updated my earlier how-to response.

Re: Remote access

MuS — Wed, 29 Oct 2014 12:43:18 GMT

usually this is the only thing that blocks login's to the UI...