topic Re: Splunk Target Server in Alerting

I was wondering what is the target server connected with the Splunk server which is getting updates alerts?

WildHuckleberry — Thu, 10 Mar 2022 16:32:35 GMT

Hi,

I was wondering what is the target server connected with the Splunk server which is getting updates alerts?

It looks like it is not a Private network because I am still getting updates alerts.

Thanks in advance.

Re: Splunk Target Server

isoutamo — Thu, 16 Dec 2021 08:32:09 GMT

you could try this one

curl https://quickdraw.splunk.com/js/pro/7.3.3/login var spotParams = { imageUrl: '', description: '', hasNewVersion: true, newVersionLabel: '8.2.1', location: 'login', hasNewMaintenanceVersion: true, latestMaintenanceVersionLabel: '7.3.9' } ;displaySpot(spotParams);

r. Ismo

Re: Splunk Target Server

WildHuckleberry — Tue, 21 Dec 2021 01:20:14 GMT

Thank you so much for your answer @isoutamo

Then, what would be the connection cycle(time)?

From engineer and from target server to Splunk server.

Re: Splunk Target Server

isoutamo — Tue, 21 Dec 2021 07:19:23 GMT

I couldn’t found it from here https://docs.splunk.com/Documentation/Splunk/8.2.3/Admin/Webconf

Maybe the easiest way to figure it out, is check those logging options and/or set up firewall to block and log those tries?