indexer and SH weird question

[Raghav2384]

Hey Experts,

Have a stupid question (Me being honest). We have a Splunk setup that runs on x network and we have a new SPlunk setup on y network.

Plan is to have indexed data on x instance to y search heads. Solution would be to puncch firewalls between splunk x indexers and splunk y search heads correct?

Now, security guys have problems punching are allowing communication between x Indexers and y search heads. Is there any other solution avoiding firewall?

Thanks,
Raghav

[jayannah]

Yes, you need to open the firewall ports between x & y.

[Raghav2384]

Thanks for the quick reply....That's where the whole security guys come in...my question was more like is there any other way completely avoiding firewalls rules...i know you gotta punch firewall rules, but some people doesn't get that! 🙂