Getting Data In

access to splunk.com

a_splunk_user
Path Finder

Hi -

My indexer (on Windows) is behind a firewall which generally disallows outbound traffic from this server, but I want to configure it to access splunk.com to get downloads.

I ping Splunk.com and it resolves to 54.69.58.243 .
I put in a static DNS entry for the site in the server host file.
In the firewall I allow https from the indexer internal IP to the Splunk.com IP.
I see it is not blocked in the firewall, and I am able to telnet to it on port 443 from the server.

But if I attempt to browse the page it will not load, either by URL or IP.
I suspect there are other IP addresses that are needed, but this is just a guess.
Any ideas?

Thanks!

Tags (1)
0 Karma

harsmarvania57
SplunkTrust
SplunkTrust

Hi,

As far as I remember, you need to whitelist below IPs in firewall with port 443/TCP.

Non-authoritative answer:
Name:   splunkbase.splunk.com
Address: 35.165.43.73
Name:   splunkbase.splunk.com
Address: 54.186.82.128
Name:   splunkbase.splunk.com
Address: 52.89.105.73
0 Karma
Get Updates on the Splunk Community!

Improve Your Security Posture

Watch NowImprove Your Security PostureCustomers are at the center of everything we do at Splunk and security ...

Maximize the Value from Microsoft Defender with Splunk

 Watch NowJoin Splunk and Sens Consulting for this Security Edition Tech TalkWho should attend:  Security ...

This Week's Community Digest - Splunk Community Happenings [6.27.22]

Get the latest news and updates from the Splunk Community here! News From Splunk Answers ✍️ Splunk Answers is ...