Getting Data In

indexer and SH weird question

Raghav2384
Motivator

Hey Experts,

Have a stupid question (Me being honest). We have a Splunk setup that runs on x network and we have a new SPlunk setup on y network.

Plan is to have indexed data on x instance to y search heads. Solution would be to puncch firewalls between splunk x indexers and splunk y search heads correct?

Now, security guys have problems punching are allowing communication between x Indexers and y search heads. Is there any other solution avoiding firewall?

Thanks,
Raghav

0 Karma

jayannah
Builder

Yes, you need to open the firewall ports between x & y.

0 Karma

Raghav2384
Motivator

Thanks for the quick reply....That's where the whole security guys come in...my question was more like is there any other way completely avoiding firewalls rules...i know you gotta punch firewall rules, but some people doesn't get that! 🙂

0 Karma
Did you miss .conf21 Virtual?

Good news! The event's keynotes and many of its breakout sessions are now available online, and still totally FREE!