Deployment Architecture

adding local port inside HF to accept data

KhalidAlharthi
Explorer

Hello Members,

 

I have configured splunk HF to recieve data input as port 1531/udp 

 

i used command firewall-cmd --permanent --zone=public --add-port=1531/udp

 

but when i used firewall-cmd --list-all dosen't appear on the opening ports is this consider a problem and also checked netstat and the port is listening on 0.0.0.0 (all)

 

thanks

Labels (1)
0 Karma

kiran_panchavat
SplunkTrust
SplunkTrust

@KhalidAlharthi 

1. Reload Firewall Rules : sudo firewall-cmd --reload

2. Verify the Rule is Active: sudo firewall-cmd --list-all

3. Consider SELinux: If you're using SELinux (Security-Enhanced Linux), it could also be blocking access. You can temporarily disable it to test if that's the issue : 
sudo setenforce 0

Did this help? If yes, please consider giving kudos, marking it as the solution, or commenting for clarification — your feedback keeps the community going!
0 Karma

PickleRick
SplunkTrust
SplunkTrust

SELinux has nothing to do with firewalld in the sense that adding a rule to firewalld should work regardless of SELinux status - the rule should show. True, SELinux coud prevent the process from processing connection but that's completely independent from firewalld.

0 Karma
Get Updates on the Splunk Community!

Your Guide to Splunk Digital Experience Monitoring

A flawless digital experience isn't just an advantage, it's key to customer loyalty and business success. But ...

Data Management Digest – November 2025

  Welcome to the inaugural edition of Data Management Digest! As your trusted partner in data innovation, the ...

Upcoming Webinar: Unmasking Insider Threats with Slunk Enterprise Security’s UEBA

Join us on Wed, Dec 10. at 10AM PST / 1PM EST for a live webinar and demo with Splunk experts! Discover how ...