All Apps and Add-ons
Highlighted

I can not connect to splunk using AWS- Any ideas?

Path Finder

I am new to Splunk and I was trying to connect since last weekend..it keep me booting me out..Unable to connect
I was using Putty SSH
This is what I see

Any suggestions?

alt text

Tags (3)
0 Karma
Highlighted

Re: I can not connect to splunk using AWS- Any ideas?

Motivator

You have to open up ports 443 for SSH access and 8000 for web UI access in your "inbound rules".

0 Karma
Highlighted

Re: I can not connect to splunk using AWS- Any ideas?

Motivator

Please don't respond with additional questions as "answers". Comment on only the original post or answer.

Are you using a Elastic Load Balancer (ELB) ?

0 Karma
Highlighted

Re: I can not connect to splunk using AWS- Any ideas?

Path Finder

no..should I ?

0 Karma
Highlighted

Re: I can not connect to splunk using AWS- Any ideas?

Path Finder

I am not an expert, but this is what I think:
I don't think that I need ELB , because I don't need to load balancing between several instances.. I only have one, as you could see

What do you think?

0 Karma
Highlighted

Re: I can not connect to splunk using AWS- Any ideas?

Path Finder
0 Karma
Highlighted

Re: I can not connect to splunk using AWS- Any ideas?

Path Finder
0 Karma
Highlighted

Re: I can not connect to splunk using AWS- Any ideas?

Motivator

Hello @ohhhvictor

I'm able to connect to this IP via SSH.

  1. please edit the screenshot and mask the IP address 🙂 do it ASAP
  2. make sure you're using strong splunk password. You can change it via SSH with

    su - splunk
    splunk edit user -auth admin: -password

  3. check AWS security group -> inbound rules that 8000/TCP is allowed

  4. check iptables with iptables-save that 8000/TCP is allowed

FYI: t2.micro is too small für Splunk

Let me know how it went

0 Karma
Highlighted

Re: I can not connect to splunk using AWS- Any ideas?

Path Finder

I was connected before in putty last week..I havent modify anything..
You mention to open port 443...Where ? in putty? I am connected through ssh., port 22 now

alt text

0 Karma
Highlighted

Re: I can not connect to splunk using AWS- Any ideas?

Path Finder

alt text

it s not a matter of security group..I am allowing all traffic because I am learning , and I need to see traffic from different ports and monitor it

so port 443 and 8000 must be open as you can see

0 Karma
Speak Up for Splunk Careers!

We want to better understand the impact Splunk experience and expertise has has on individuals' careers, and help highlight the growing demand for Splunk skills.