topic Re: indexer and SH weird question in Getting Data In

indexer and SH weird question

Raghav2384 — Tue, 03 Feb 2015 15:05:24 GMT

Hey Experts,

Have a stupid question (Me being honest). We have a Splunk setup that runs on x network and we have a new SPlunk setup on y network.

Plan is to have indexed data on x instance to y search heads. Solution would be to puncch firewalls between splunk x indexers and splunk y search heads correct?

Now, security guys have problems punching are allowing communication between x Indexers and y search heads. Is there any other solution avoiding firewall?

Thanks,
Raghav

Re: indexer and SH weird question

jayannah — Tue, 03 Feb 2015 15:14:11 GMT

Yes, you need to open the firewall ports between x & y.

Re: indexer and SH weird question

Raghav2384 — Tue, 03 Feb 2015 15:37:22 GMT

Thanks for the quick reply....That's where the whole security guys come in...my question was more like is there any other way completely avoiding firewalls rules...i know you gotta punch firewall rules, but some people doesn't get that! 🙂