Deployment Architecture

Any gotchas or issues using a HF with HEC in a DMZ to collect and forward data to an on-prem indexer cluster?

mikefg
Communicator

I need to collect data using HEC from an Internet source into my on-prem Splunk environment. It looks like I can run HEC on a Heavy Forwarder and then forward the collected data to my indexer cluster.

I will use https so the communication is encrypted and DNS and networking/firewall shouldn't be a problem.

Any gotchas or issues using a HF with HEC in a DMZ to collect and forward data to an on-prem indexer cluster?

Labels (1)
0 Karma
1 Solution

richgalloway
SplunkTrust
SplunkTrust

That's a fairly normal practice so I don't expect any problems.

---
If this reply helps you, Karma would be appreciated.

View solution in original post

0 Karma

richgalloway
SplunkTrust
SplunkTrust

That's a fairly normal practice so I don't expect any problems.

---
If this reply helps you, Karma would be appreciated.
0 Karma

mikefg
Communicator

Thanks! I will proceed.

0 Karma
Get Updates on the Splunk Community!

What's new in Splunk Cloud Platform 9.1.2312?

Hi Splunky people! We are excited to share the newest updates in Splunk Cloud Platform 9.1.2312! Analysts can ...

What’s New in Splunk Security Essentials 3.8.0?

Splunk Security Essentials (SSE) is an app that can amplify the power of your existing Splunk Cloud Platform, ...

Let’s Get You Certified – Vegas-Style at .conf24

Are you ready to level up your Splunk game? Then, let’s get you certified live at .conf24 – our annual user ...