topic Re: Isolated network in Deployment Architecture

Isolated network

Harley — Tue, 03 Oct 2023 00:24:03 GMT

on isolated network/no internet access considered a transport network. Is there a way to still use add ons/ apps?

Re: Isolated network

inventsekar — Tue, 03 Oct 2023 01:28:24 GMT

Hi @Harley ..i am 80% sure that these apps/add-ons will work smooth on the isolated networks. need to test this scenario

Re: Isolated network

Harley — Tue, 03 Oct 2023 08:55:42 GMT

Thanks for the reply. I am

just curious if I Splunk is already installed on the isolated network if I need internet connectivity to download the add ons/apps etc ?

Re: Isolated network

PickleRick — Tue, 03 Oct 2023 12:43:03 GMT

If you have a whole Splunk infrastructure which is placed in an isolated network segment with no external connectivity - yes, you can use apps and addons. You just have to manually "insert" them into the environment (for example pass them on a USB stick).

In bigger installations you typically don't download the apps directly onto your Splunk servers but distribute them using builtin Splunk mechanisms (deployment server, SH deployer, cluster master) or using your favourite configuration management tool like ansible.

Re: Isolated network

Harley — Tue, 03 Oct 2023 12:31:39 GMT

I apologize for the confusion, yes Splunk infrastructure is placed on the isolated network. I am trying to find the best solution, i have a few servers and workstations and using windows and would like to monitor windows events, network monitoring and currently using a MYSQL. and trying to see how I can use Splunk