Is it possible to allow users outside of my network to access Splunk Enterprise?

[dablab]

Am I able to set up a Splunk instance that would allow users outside of my network to enter my Splunk instance in a VM environment? Can anyone link me to documentation that will help.  

Preferably something  that can be connected via URL like this  https://splunk.samsclass.info 

(Username: Student1

Password: Student1)

Just something in a safe environment that a few people can play around in. 

Does Splunk itself allow this ability?

[gcusello]

Hi @dablab,

you have to expone a Splunk server outside of your network, with all the dangers you can imaginate.

you can use the normal rules for a problem like this, there isn'ìt a guideline for this in addition to the good sense!

All depends on the relevance of these data.

Maybe it could be more sure to use a VPN or adopt a multifactor authentication.

On Splunk, you have to create on the exposed Splunk Server a role with limited features and data access limited to the strickly necessary.

Eventually, you could think to use an instance on Splunk Cloud, where the data to display are replicated.

Ciao.

Giuseppe