Do I need to make changes to my firewall to use MINT App? Do I need to whitelist IP addresses?

[croyal_splunk]

Do I need to make changes to my firewall to use MINT App? Do I need to whitelist IP addresses?

[croyal_splunk · Accepted solution]

Before you install the Splunk MINT App, ensure the firewalls on the search heads allow outgoing HTTPS traffic (TCP:443). If you have a standalone deployment, the single instance of Splunk Enterprise acts as both a search head and forwarder.

Splunk MINT uses client SSL authentication to connect to the MINT Cloud services. The following URLs are used for sending data:

MINT Cloud: data.cds.splkmobile.com
MINT Authentication Server: cdsauth.splkmobile.com and auth.cds.splkmobile.com
MINT Symbolicator: ios.splkmobile.com 

The search heads must be able to connect to the MINT URLs to set up the Splunk MINT App and symbolicate iOS errors. Ensure the following IP addresses are whitelisted so that the MINT Cloud Data Collector authentication endpoint can be reached:

54.193.6.245
54.183.222.143
54.183.222.136
54.153.51.51
52.8.207.32
52.8.207.109
208.78.105.194 through 208.78.105.202

For additional details, see MINT App User Guide.

[parthiv]

How to allow outgoing HTTPS traffic?