All Apps and Add-ons

Can we connect our AWS Splunk Enterprise instance via SSH?

abovebeyond
Communicator

Hello,

We are trying to connect our AWS splunk enterprise instance via ssh but we get "no supported authentication methods .... (publickey)"

Via web interface everything is ok.

We tried to ask Amazon support, but they told us that we can't reach splunk via ssh if this an AWS image.

So, can we connect Splunk via SSH ?

Tags (2)

jesse_corray
Explorer

This is often caused by an older version of the client software that you are using. For example if you are using WinSCP to connect you will need to upgrade that. When I migrated from RHEL6 to RHEL7 I was on an older version of WinSCP/Putty and had to upgrade to the latest version as the older one did not have the ciphers required to connect to RHEL 7.

0 Karma

nkwong_splunk
Splunk Employee
Splunk Employee

Yes, if you are using the Splunk Enterprise AMI located on the AWS marketplace (https://aws.amazon.com/marketplace/pp/B00PUXWXNE ), then SSH should be enabled by default. The Splunk Enterprise AMI is using Amazon Linux so the default user would be 'ec2-user' to connect via SSH. Here are additional details on how to connect to EC2 instances via SSH.

http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/AccessingInstancesLinux.html#AccessingInstancesLi...

You may also want to check that you are using the correct private key pair while connecting via SSH to your EC2 instance.

Get Updates on the Splunk Community!

Improve Data Pipelines Using Splunk Data Management

  Register Now   This Tech Talk will explore the pipeline management offerings Edge Processor and Ingest ...

3-2-1 Go! How Fast Can You Debug Microservices with Observability Cloud?

Register Join this Tech Talk to learn how unique features like Service Centric Views, Tag Spotlight, and ...

Thank You for Celebrating CX Day with Splunk!

Yesterday the entire team at Splunk + Cisco joined the global celebration of CX Day - celebrating our ...