Installation

Installation Issues - enterprise and forwarder

gherkin
Explorer

good afternoon

I'm currently running the trial Enterprise version on a workstation which (appears to) installed OK, i've installed a forwarder on a server, again which appears to have installed OK, however I can't seem to get the two to talk to each other (I can't add the forwarder in the Enterprise UI as it can't find it) I've searched for the problem on google etc but have only come across 1 post that relates to what I am experiencing - the solution didn't work lol.

Would anyone happen to have any ideas or point me in the right direction please.

TIA

Labels (2)
0 Karma
1 Solution

isoutamo
SplunkTrust
SplunkTrust

Hi

here https://docs.splunk.com/Documentation/Forwarder/8.2.3/Forwarder/HowtoforwarddatatoSplunkEnterprise is instructions how to configure indexing on IDX and UF side. You must also check that there is no firewalls between nodes. Open needed ports if needed. 

r. Ismo

View solution in original post

gherkin
Explorer

you star, thank you, i'd done one firewall, but for some reason not the other. thank you very much

0 Karma

isoutamo
SplunkTrust
SplunkTrust

Hi

here https://docs.splunk.com/Documentation/Forwarder/8.2.3/Forwarder/HowtoforwarddatatoSplunkEnterprise is instructions how to configure indexing on IDX and UF side. You must also check that there is no firewalls between nodes. Open needed ports if needed. 

r. Ismo

Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Build the Future of Agentic AI: Join the Splunk Agentic Ops Hackathon

AI is changing how teams investigate incidents, detect threats, automate workflows, and build intelligent ...

[Puzzles] Solve, Learn, Repeat: Character substitutions with Regular Expressions

This challenge was first posted on Slack #puzzles channelFor BORE at .conf23, we had a puzzle question which ...

Splunk Community Badges!

  Hey everyone! Ready to earn some serious bragging rights in the community? Along with our existing badges ...