Getting Data In

Splunk Cloud Gateway Forwarder

SanjayTiwary
New Member

I am in process of setting up forwarders to push data from my corp network to splunk cloud instance. My data(machine data) sources are Tanium, Absolute DDS, Airwatch, AD....couple of more tools. If I am not wrong, it makes more sense to go for Gateway Forwarder. With that, my question is -
1. What is the sizing configuration for Gateway Forwarder I can consider?
2. From my reads I collect that, UDP 514[to forwarders] and TCP 9997[to indexer] are the ports that I need to open, is this correct?
3. Does splunk provides range of IP addresses for firewall to establish connection from our corp network to splunk cloud? or I am missing something?

Tags (1)
0 Karma
Get Updates on the Splunk Community!

Splunk Observability Cloud's AI Assistant in Action Series: Auditing Compliance and ...

This is the third post in the Splunk Observability Cloud’s AI Assistant in Action series that digs into how to ...

Splunk Community Badges!

  Hey everyone! Ready to earn some serious bragging rights in the community? Along with our existing badges ...

What You Read The Most: Splunk Lantern’s Most Popular Articles!

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...