Deployment Architecture

Deployment server firewall rules

EricPartington
Communicator

I am planning to use the deployment server functionality of splunk 4.2 . I am trying to in down all the firewall rules and direction that will be required to make all the components of splunk work.

is the deployment server a push from server to client, or are there client to server initiated communications (call home, checkups)? Do these use the same 8089 (or configured) port that a distributed search head and indexer would use to communicate ?

what about the master license server? What ports does it use to transfer/poll for licensing information? What is the direction of that network flow ? (pull from master or push from slave?)

1 Solution

hazekamp
Builder

With respect to deployment client-server, the client is responsible for contacting the server. The port for this is configurable based on splunkd of your deployment server but would default to 8089.

See also: http://www.splunk.com/base/Documentation/latest/Deploy/Aboutdeploymentserver

With respect to License slaves I believe they work similar to deployment clients (contacting License master via splunkd 8089 by default).

See also: http://www.splunk.com/base/Documentation/latest/Admin/Configurealicenseslave

View solution in original post

hazekamp
Builder

With respect to deployment client-server, the client is responsible for contacting the server. The port for this is configurable based on splunkd of your deployment server but would default to 8089.

See also: http://www.splunk.com/base/Documentation/latest/Deploy/Aboutdeploymentserver

With respect to License slaves I believe they work similar to deployment clients (contacting License master via splunkd 8089 by default).

See also: http://www.splunk.com/base/Documentation/latest/Admin/Configurealicenseslave

Get Updates on the Splunk Community!

Routing logs with Splunk OTel Collector for Kubernetes

The Splunk Distribution of the OpenTelemetry (OTel) Collector is a product that provides a way to ingest ...

Welcome to the Splunk Community!

(view in My Videos) We're so glad you're here! The Splunk Community is place to connect, learn, give back, and ...

Tech Talk | Elevating Digital Service Excellence: The Synergy of Splunk RUM & APM

Elevating Digital Service Excellence: The Synergy of Real User Monitoring and Application Performance ...