Splunk Add-on for Amazon Web Services - What Ports to Open

[himynamesdave]

Hi guys - I'm using the AWS app and am having trouble with ports (I think). Does anyone know what ports the app uses by default (if different to the Splunk defaults)?

https://apps.splunk.com/app/1274/#/overview

[monkee]

Whichever application you use the ports are pretty much the same. The billing component of both apps requires access to the programmatic billing bucket located in S3. The ports required for this are HTTP and HTTPS (80 and 443).

The URL endpoint will depend on which region you setup your billing bucket. A full list can be accessed here:
http://docs.aws.amazon.com/general/latest/gr/rande.html

There is also some API access as well but the ports do not change they are still HTTP and HTTPS.,The billing component of the app requires access to the billing reports bucket in s3 on port numbers 80 and 443.

The URLs can be regional depending on where you setup your billing bucket:
- US Standard s3.amazonaws.com (N.Virginia or Pacific Northwest) or s3-external-1.amazonaws.com (N.Virginia only)
- US West ( Oregon) s3-us-west-2.amazonaws.com
- US West (N.California) s3-us-west-1.amazonaws.com

- EU (Ireland) s3-eu-west-1.amazonaws.com

- EU (Frankfurt) s3-eu-central-1.amazonaws.com
- Asia Pacific (Singapore) s3-ap-southeast-1.amazonaws.com
- Asia Pacific (Sydney) s3-ap-southeast-2.amazonaws.com

- Asia Pacific (Tokyo) s3-ap-northeast-1.amazonaws.com

The API component still uses port numbers 80 and 443 but can hit regional endpoints as defined here:
http://docs.aws.amazon.com/general/latest/gr/rande.html

[ppablo]

Hey @himynamesdave

Just wanted to clarify, but are you referring to the Splunk Add-on for Amazon Web Services (https://apps.splunk.com/app/1876/ ) that you mention in the title or the Splunk App for AWS (https://apps.splunk.com/app/1274/ ) that you tagged and mentioned in the content? Currently editing the post and those are two separate things. Thanks!