Can we connect our AWS Splunk Enterprise instance via SSH?

[abovebeyond]

Hello,

We are trying to connect our AWS splunk enterprise instance via ssh but we get "no supported authentication methods .... (publickey)"

Via web interface everything is ok.

We tried to ask Amazon support, but they told us that we can't reach splunk via ssh if this an AWS image.

So, can we connect Splunk via SSH ?

[jesse_corray]

This is often caused by an older version of the client software that you are using. For example if you are using WinSCP to connect you will need to upgrade that. When I migrated from RHEL6 to RHEL7 I was on an older version of WinSCP/Putty and had to upgrade to the latest version as the older one did not have the ciphers required to connect to RHEL 7.

[nkwong_splunk]

Yes, if you are using the Splunk Enterprise AMI located on the AWS marketplace (https://aws.amazon.com/marketplace/pp/B00PUXWXNE ), then SSH should be enabled by default. The Splunk Enterprise AMI is using Amazon Linux so the default user would be 'ec2-user' to connect via SSH. Here are additional details on how to connect to EC2 instances via SSH.

http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/AccessingInstancesLinux.html#AccessingInstancesLi...

You may also want to check that you are using the correct private key pair while connecting via SSH to your EC2 instance.