Deployment Architecture

adding local port inside HF to accept data

KhalidAlharthi
Explorer

Hello Members,

 

I have configured splunk HF to recieve data input as port 1531/udp 

 

i used command firewall-cmd --permanent --zone=public --add-port=1531/udp

 

but when i used firewall-cmd --list-all dosen't appear on the opening ports is this consider a problem and also checked netstat and the port is listening on 0.0.0.0 (all)

 

thanks

Labels (1)
0 Karma

kiran_panchavat
Influencer

@KhalidAlharthi 

1. Reload Firewall Rules : sudo firewall-cmd --reload

2. Verify the Rule is Active: sudo firewall-cmd --list-all

3. Consider SELinux: If you're using SELinux (Security-Enhanced Linux), it could also be blocking access. You can temporarily disable it to test if that's the issue : 
sudo setenforce 0

I hope this helps, if any reply helps you, you could add your upvote/karma points to that reply, thanks.
0 Karma

PickleRick
SplunkTrust
SplunkTrust

SELinux has nothing to do with firewalld in the sense that adding a rule to firewalld should work regardless of SELinux status - the rule should show. True, SELinux coud prevent the process from processing connection but that's completely independent from firewalld.

0 Karma
Get Updates on the Splunk Community!

Splunk Observability Synthetic Monitoring - Resolved Incident on Detector Alerts

We’ve discovered a bug that affected the auto-clear of Synthetic Detectors in the Splunk Synthetic Monitoring ...

Video | Tom’s Smartness Journey Continues

Remember Splunk Community member Tom Kopchak? If you caught the first episode of our Smartness interview ...

3-2-1 Go! How Fast Can You Debug Microservices with Observability Cloud?

3-2-1 Go! How Fast Can You Debug Microservices with Observability Cloud? Learn how unique features like ...