All Apps and Add-ons

Unable to receive data from external host

nvij_splunk
Splunk Employee
Splunk Employee

only able to receive logs sent by localhost and not from external hosts.

 

Labels (1)
0 Karma

nvij_splunk
Splunk Employee
Splunk Employee

Check if firewall running? external firewall maybe? iptables routing messing things up? can you see the data reaching the box with tcpdump?

The issue was resolved by disabling the SELinux firewall.

0 Karma
Get Updates on the Splunk Community!

Tech Talk Recap | Mastering Threat Hunting

Mastering Threat HuntingDive into the world of threat hunting, exploring the key differences between ...

Observability for AI Applications: Troubleshooting Latency

If you’re working with proprietary company data, you’re probably going to have a locally hosted LLM or many ...

Splunk AI Assistant for SPL vs. ChatGPT: Which One is Better?

In the age of AI, every tool promises to make our lives easier. From summarizing content to writing code, ...