All Apps and Add-ons

Can we connect our AWS Splunk Enterprise instance via SSH?

abovebeyond
Communicator

Hello,

We are trying to connect our AWS splunk enterprise instance via ssh but we get "no supported authentication methods .... (publickey)"

Via web interface everything is ok.

We tried to ask Amazon support, but they told us that we can't reach splunk via ssh if this an AWS image.

So, can we connect Splunk via SSH ?

Tags (2)

jesse_corray
Explorer

This is often caused by an older version of the client software that you are using. For example if you are using WinSCP to connect you will need to upgrade that. When I migrated from RHEL6 to RHEL7 I was on an older version of WinSCP/Putty and had to upgrade to the latest version as the older one did not have the ciphers required to connect to RHEL 7.

0 Karma

nkwong_splunk
Splunk Employee
Splunk Employee

Yes, if you are using the Splunk Enterprise AMI located on the AWS marketplace (https://aws.amazon.com/marketplace/pp/B00PUXWXNE ), then SSH should be enabled by default. The Splunk Enterprise AMI is using Amazon Linux so the default user would be 'ec2-user' to connect via SSH. Here are additional details on how to connect to EC2 instances via SSH.

http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/AccessingInstancesLinux.html#AccessingInstancesLi...

You may also want to check that you are using the correct private key pair while connecting via SSH to your EC2 instance.

Get Updates on the Splunk Community!

Index This | How many sides does a circle have?

February 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...

Registration for Splunk University is Now Open!

Are you ready for an adventure in learning?   Brace yourselves because Splunk University is back, and it's ...

Splunkbase | Splunk Dashboard Examples App for SimpleXML End of Life

The Splunk Dashboard Examples App for SimpleXML will reach end of support on Dec 19, 2024, after which no new ...