https://community.splunk.com/t5/Getting-Data-In/How-to-send-data-to-indexer-and-pulling-config-data-from/m-p/225847#M44142 <P>makes sense. however, if I want to lock down a port on the forwarder sitting in DMZ to use a port to communicate to 8089 on deployment server and to communicate to 9997 on indexers how do I do that? Where do I specify the port on the forwarder to communicate to DS and IDX?</P> Thu, 10 Nov 2016 17:52:37 GMT brdr 2016-11-10T17:52:37Z https://community.splunk.com/t5/Getting-Data-In/How-to-send-data-to-indexer-and-pulling-config-data-from/m-p/225845#M44140 <P>We will be installing the forwarder onto our domain controllers in DMZ.</P> <P>Question, can we hardwire a port on the DC where the forwarder is installed to connect to :</P> <OL> <LI>deployment server on 8089</LI> <LI>indexers on 9997</LI> </OL> Thu, 10 Nov 2016 17:34:30 GMT https://community.splunk.com/t5/Getting-Data-In/How-to-send-data-to-indexer-and-pulling-config-data-from/m-p/225845#M44140 brdr 2016-11-10T17:34:30Z https://community.splunk.com/t5/Getting-Data-In/How-to-send-data-to-indexer-and-pulling-config-data-from/m-p/225846#M44141 <P>Yes,</P> <P>When you install the forwarder just specify the DS server &amp; Port like this:</P> <P>msiexec.exe /i Splunk.msi DEPLOYMENT_SERVER=host:port /quiet</P> <P>Then you should create an outputs App on your DS that will push just an outputs.conf to all your Forwarders.</P> <P>Make sense?<BR /> <A href="http://docs.splunk.com/Documentation/Splunk/6.5.0/Installation/InstallonWindowsviathecommandline">http://docs.splunk.com/Documentation/Splunk/6.5.0/Installation/InstallonWindowsviathecommandline</A> </P> Thu, 10 Nov 2016 17:40:50 GMT https://community.splunk.com/t5/Getting-Data-In/How-to-send-data-to-indexer-and-pulling-config-data-from/m-p/225846#M44141 Heff 2016-11-10T17:40:50Z https://community.splunk.com/t5/Getting-Data-In/How-to-send-data-to-indexer-and-pulling-config-data-from/m-p/225847#M44142 <P>makes sense. however, if I want to lock down a port on the forwarder sitting in DMZ to use a port to communicate to 8089 on deployment server and to communicate to 9997 on indexers how do I do that? Where do I specify the port on the forwarder to communicate to DS and IDX?</P> Thu, 10 Nov 2016 17:52:37 GMT https://community.splunk.com/t5/Getting-Data-In/How-to-send-data-to-indexer-and-pulling-config-data-from/m-p/225847#M44142 brdr 2016-11-10T17:52:37Z https://community.splunk.com/t5/Getting-Data-In/How-to-send-data-to-indexer-and-pulling-config-data-from/m-p/225848#M44143 <P>the deploymentclient.conf will have the server:port in it and the outputs.conf will have the indexer server:port in it too. Additionally the indexer and DS are only listening on those same ports.</P> <P><A href="http://docs.splunk.com/Documentation/Splunk/6.5.0/Admin/Deploymentclientconf">http://docs.splunk.com/Documentation/Splunk/6.5.0/Admin/Deploymentclientconf</A><BR /> <A href="http://docs.splunk.com/Documentation/Splunk/6.5.0/Admin/Outputsconf">http://docs.splunk.com/Documentation/Splunk/6.5.0/Admin/Outputsconf</A></P> Thu, 10 Nov 2016 17:56:53 GMT https://community.splunk.com/t5/Getting-Data-In/How-to-send-data-to-indexer-and-pulling-config-data-from/m-p/225848#M44143 Heff 2016-11-10T17:56:53Z