Security

How to setup a Splunk instance from outside the firewall it is Nat'd behind?

illicittiger
Engager

Good afternoon,

I'm trying to get a Splunk instance setup to be accessed from outside the firewall it is NAT'd behind. Currently, I have the port forwarding rule in for 8000->8000. I can access the Splunk login page from outside the firewall, but when I input my credentials, it just reloads the login page.

I have checked the Splunk access.log, and it says user=admin, action=login attempt, info=succeeded. I also tried forwarding the REST API port (8089), and that hasn't helped. I found the "allowRemoteLogin" setting in server.conf, and set it to always, but that also did not help. I have checked my firewall logs, and it has not blocked anything coming in or out of the Splunk server. Also, I'm able to login and use Splunk normally from within the local network.

Is there anything I'm missing here? I'm not the most familiar with Splunk, so it might be staring me in the face, but I've tried Googling for a while and haven't found an answer. Thanks for the help!

0 Karma
1 Solution

illicittiger
Engager

I just figured it out. The time on the Splunk server was off by about 4 hours. It appears my session was immediately invalid upon authentication. I am not able to login remotely.

View solution in original post

illicittiger
Engager

I just figured it out. The time on the Splunk server was off by about 4 hours. It appears my session was immediately invalid upon authentication. I am not able to login remotely.

Get Updates on the Splunk Community!

Unlock New Opportunities with Splunk Education: Explore Our Latest Courses!

At Splunk Education, we’re dedicated to providing top-tier learning experiences that cater to every skill ...

Technical Workshop Series: Splunk Data Management and SPL2 | Register here!

Hey, Splunk Community! Ready to take your data management skills to the next level? Join us for a 3-part ...

Spotting Financial Fraud in the Haystack: A Guide to Behavioral Analytics with Splunk

In today's digital financial ecosystem, security teams face an unprecedented challenge. The sheer volume of ...