Splunk Dev

How to connect C# SDK sample to Splunk Enterprise created from Azure?

ponsakthi
Engager

I have created Splunk Enterprise Server from Azure market place.
I am now trying to connect to this server from C# sdk using the server name and port(8089). But I get an error

An error occurred while sending the
request

I have disabled Server certificate validation on the C# sample.

    ServicePointManager.SecurityProtocol = SecurityProtocolType.Ssl3;
    ServicePointManager.ServerCertificateValidationCallback += (sender, certificate, chain, sslPolicyErrors) => true;

Also, as per the tutorial when I try to navigate to scheme://host:port for the azure server, I get ERR_CONNECTION_TIMED_OUT
https://servername.azure.com:8089/

Is there any other settings that I have to configure on Server?

Tags (2)
0 Karma

rarsan_splunk
Splunk Employee
Splunk Employee

Splunk in Azure Marketplace deploys Splunk instance(s) within a newly created virtual network (vnet). By default, Splunk management port 8089 is open only to the private virtual network for security reasons. You could manually change that to allow traffic from a particular CIDR range or the public internet. From the Azure portal, browse to the network security group which was created by the template for the server(s) in question, and update the inbound security rule named "Allow-Mgmt-From-VNET". Alternatively, you could of course run the C# client from within the vnet.
Hope this helps.

0 Karma

martin_mueller
SplunkTrust
SplunkTrust

Assuming all parameters are correct, a timeout usually means blocking firewalls.

Can you telnet to the management port?

0 Karma
Get Updates on the Splunk Community!

Stay Connected: Your Guide to May Tech Talks, Office Hours, and Webinars!

Take a look below to explore our upcoming Community Office Hours, Tech Talks, and Webinars this month. This ...

They're back! Join the SplunkTrust and MVP at .conf24

With our highly anticipated annual conference, .conf, comes the fez-wearers you can trust! The SplunkTrust, as ...

Enterprise Security Content Update (ESCU) | New Releases

Last month, the Splunk Threat Research Team had two releases of new security content via the Enterprise ...