Hello Splunk Users,
We have two Linux VMs in which one is a Splunk Console and the other is a VM that will push data into the console.
in the Add Data-> Configure Integrations screen, I key in the HTTP Event Collector port 8088, and the Receiver port 9997 and the HEC token. A script is generated and then the contents of that needs to be executed on the source VM. When i ask my System Administrator to do that, he explained that it was a FW rule refusal. This should not be the case as both these VMs are in our Internal Zone and no firewall issues should present. The Network guy confirms there should be no firewalls either between these interfaces.
What am i missing here? Any assistance would be appreciated.
Thank You,
David
