Getting Data In

In trying to deploy Splunk Enterprise from the Azure marketplace and getting "DeploymentNotFound"

gregcork2
New Member

I am trying to deploy Splunk Enterprise via the Azure Marketplace and I get the below error.
Deployment 'splunk.splunk-enterprisebyol-20170518170301' could not be found. (Code: DeploymentNotFound)
The Azure instance is firewalled off from the Internet but ports 80 and 443 to ANY is allowed. What needs to be allowed to get it deployed?

Thanks
Greg

Tags (2)
0 Karma
1 Solution

rarsan_splunk
Splunk Employee
Splunk Employee

Azure VM instance needs at least outbound access to Azure Storage for the VM Linux agent and extension.

View solution in original post

0 Karma

gregcork2
New Member

That access should already be in place as we have built multiple servers in the Azure tenant with no issues. I'll be giving up on the Splunk Enterprise and do a normal install onto a cloud hosted server.

Thanks
Greg

0 Karma

rarsan_splunk
Splunk Employee
Splunk Employee

Azure VM instance needs at least outbound access to Azure Storage for the VM Linux agent and extension.

0 Karma

gregcork2
New Member

Thanks for the reply @hardikJsheth, but the issue that I am having is during the install of Splunk in Azure, while the ports you have listed look to be for after Splunk is operational.

Thanks

0 Karma

hardikJsheth
Motivator

I am not sure what's error here. But by default Splunk uses following ports

8000 - Web
8089 - Management
8091 - KVStore.

Thanks,

0 Karma
Get Updates on the Splunk Community!

Announcing Scheduled Export GA for Dashboard Studio

We're excited to announce the general availability of Scheduled Export for Dashboard Studio. Starting in ...

Extending Observability Content to Splunk Cloud

Watch Now!   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to leverage ...

More Control Over Your Monitoring Costs with Archived Metrics GA in US-AWS!

What if there was a way you could keep all the metrics data you need while saving on storage costs?This is now ...