Getting Data In

What is the default port on Splunk Universal Forwarder for Deployment Server to send data

ajaysamantbms
Explorer

All configurations will be pushed by Deployment Server to Forwarder running on linux box.

What is the default port opened on Forwarder which is used by Server to push the data to forwarder?

Are there any other ports that needs to be opened at Forwarder side? or only one port is sufficient.

My forwarder is inside a hardware appliance. I need to open ports for server to talk to agent.

0 Karma

yannK
Splunk Employee
Splunk Employee

It works the other ways, it's a pull from the deployment-client to the deployment-server.
so make sure that the forwarders can access the deployment server on management port (default is 8089 tcp).

Get Updates on the Splunk Community!

Enterprise Security Content Update (ESCU) | New Releases

In September, the Splunk Threat Research Team had two releases of new security content via the Enterprise ...

New in Observability - Improvements to Custom Metrics SLOs, Log Observer Connect & ...

The latest enhancements to the Splunk observability portfolio deliver improved SLO management accuracy, better ...

Improve Data Pipelines Using Splunk Data Management

  Register Now   This Tech Talk will explore the pipeline management offerings Edge Processor and Ingest ...