I was wondering what is the target server connected with the Splunk server which is getting updates alerts?

[WildHuckleberry]

Hi, 

I was wondering what is the target server connected with the Splunk server which is getting updates alerts?

It looks like it is not a Private network because I am still getting updates alerts. 

Thanks in advance. 

[isoutamo · Accepted solution]

Hi

you could try this one

curl  https://quickdraw.splunk.com/js/pro/7.3.3/login
var spotParams = { imageUrl: '', description: '', hasNewVersion: true, newVersionLabel: '8.2.1', location: 'login', hasNewMaintenanceVersion: true, latestMaintenanceVersionLabel: '7.3.9' } ;displaySpot(spotParams);

• https://community.splunk.com/t5/Splunk-Enterprise/Latest-Splunk-version-on-splunk-com/m-p/97263
• https://community.splunk.com/t5/Installation/Splunk-upgraded-to-7-0-0-from-Linux-but-message-still-s...

r. Ismo 

[WildHuckleberry]

Thank you so much for your answer @isoutamo

Then, what would be the connection cycle(time)?

From engineer and from target server to Splunk server. 

[isoutamo]

I couldn’t found it from here https://docs.splunk.com/Documentation/Splunk/8.2.3/Admin/Webconf

Maybe the easiest way to figure it out, is check those logging options and/or set up firewall to block and log those tries?