Getting Data In

What ports need to be opened on the Windows 10 Defender Firewall to allow communication between the Universal Forwarder and Splunk?

I am trying to connect a Universal Forwarder on a Windows 10 computer to Splunk on another Windows 10 computer.

0 Karma

Is port 9997 the only port which must be opened on the firewall. Is the port TCP?

0 Karma

Ultra Champion

9997 to each indexer and 8089 to the deployment server, if used - all TCP.

0 Karma

SplunkTrust
SplunkTrust

Hi @rayeverestnature,

Splunk uses port 9997 between a UF/HF and indexer . Please refer here to have a comprehensive network port diagram

https://docs.splunk.com/Documentation/Splunk/7.1.1/InheritedDeployment/Ports

Ultra Champion

And port 8089 to the deployment server.

0 Karma