Installation

Connection from license slaver to master

splunkreal
Motivator

Hello guys,

is any slunk license slave able to report to a license manager without any authentification or key?

Also from this slave is it possible to connect to the splunk API port (also port tcp:8089) which is not desirable?

Thanks.

Labels (1)
0 Karma
1 Solution

yannK
Splunk Employee
Splunk Employee

in splunk 6.* and recent, the license slave has to share a pass4symmkey with the license-master.
and the license slave instances have to be able to reach license-master on port 8089 (api port)

Make sure that the original pass4symmkey is the same in their server.conf under [general] by default.
(beware, the clear string will be encrypted after a restart, so it may look different across instances, as they encrypt differently)

see http://docs.splunk.com/Documentation/Splunk/6.6.1/Admin/Serverconf

View solution in original post

yannK
Splunk Employee
Splunk Employee

in splunk 6.* and recent, the license slave has to share a pass4symmkey with the license-master.
and the license slave instances have to be able to reach license-master on port 8089 (api port)

Make sure that the original pass4symmkey is the same in their server.conf under [general] by default.
(beware, the clear string will be encrypted after a restart, so it may look different across instances, as they encrypt differently)

see http://docs.splunk.com/Documentation/Splunk/6.6.1/Admin/Serverconf

splunkreal
Motivator

Thanks a lot yann, does this require local admin credentials or license master ones?

0 Karma

yannK
Splunk Employee
Splunk Employee

no, just having unified your pass4symkey
(have having valid ssl certs)

0 Karma
Get Updates on the Splunk Community!

Enterprise Security Content Update (ESCU) | New Releases

In the last month, the Splunk Threat Research Team (STRT) has had 1 release of new security content via the ...

There's No Place Like Chrome and the Splunk Platform

Watch On DemandMalware. Risky Extensions. Data Exfiltration. End-users are increasingly reliant on browsers to ...

The Great Resilience Quest: 5th Leaderboard Update

The fifth leaderboard update for The Great Resilience Quest is out >> 🏆 Check out the ...