Security

although i can login to splunk web inside installation machin, cant remotely connect to splunk web interface

mpmalasd
Engager

I installed splunk on a centos 8 machin

 

firewall-cmd allowed port 8000, 8089, 80, 443, 9997 etc.

 

i can login to splunk web interface  http://127.0.0.1:8000  and http://10.10.10.211:8000  (ip of installation machine) 

 

every things works fine inside installation machine, and i am collecting logs from all the network machines,

 

but

 

when i try to login remotely from another windows machine by http://10.10.10.211  it dosent work and connection timeout

 

i tried to remotely telnet to port 8000 but connection time out

 

i can ping the splunk machine and every thing seems fine,

 

i stopped fiewalld service but nothing changed

i added allowRemoteLogin=always to server.conf and restarted splunk and nothing changed

why i cannont login to splunk web interface from another machine????

Labels (1)
Tags (2)
0 Karma
1 Solution

isoutamo
SplunkTrust
SplunkTrust

Hi

this sounds like FW issue. Are those machines same or different subnet? If different then there must be FW openings between those subnets.

r. Ismo

View solution in original post

isoutamo
SplunkTrust
SplunkTrust

Hi

this sounds like FW issue. Are those machines same or different subnet? If different then there must be FW openings between those subnets.

r. Ismo

View solution in original post

mpmalasd
Engager

both machines are in the same subnet:

10.10.10.211(splunk server) and 1.10.10.214(windows)

 

thanks to your tip problem solved:

it was NETWORK FIREWALL RULES that denying connection between this two machine, i talk to network administrator and he allowd trrafic on port 8000 and now everything works fine

 

i really appreciate your help 

Thanks

 

0 Karma
Did you miss .conf21 Virtual?

Good news! The event's keynotes and many of its breakout sessions are now available online, and still totally FREE!