Security

DMC protocol/port used to check indexers status?

gdigrego
Path Finder

Hello,

Since we have moved our indexers cluster servers behind a firewall, the DMC is showing all indexers as "unreachable" in the "Overview" and "Instances" dashboards ...

But the "Indexer Clustering: Status" dashboard shows them all with Status "Up".

I guess this is due to missing opening a particular protocol/port on our indexer cluster firewall. Which rule shall we add?

To be complete Port TCP 8089 is already open in the index cluster firewall rules

Thanks for you help

Tags (3)
0 Karma

splunker12er
Motivator

514 - network input port
8000 - web port (clients accessing the Splunk search page)
8080 - index replication port
8089 - management port (splunkd, aslo used by deployment server)
9997 - indexing port (web interface)
9998 - SSL port

0 Karma
Get Updates on the Splunk Community!

Customer Experience | Splunk 2024: New Onboarding Resources

In 2023, we were routinely reminded that the digital world is ever-evolving and susceptible to new ...

Celebrate CX Day with Splunk: Take our interactive quiz, join our LinkedIn Live ...

Today and every day, Splunk celebrates the importance of customer experience throughout our product, ...

How to Get Started with Splunk Data Management Pipeline Builders (Edge Processor & ...

If you want to gain full control over your growing data volumes, check out Splunk’s Data Management pipeline ...