although i can login to splunk web inside installation machin, cant remotely connect to splunk web interface

[mpmalasd]

I installed splunk on a centos 8 machin

firewall-cmd allowed port 8000, 8089, 80, 443, 9997 etc.

i can login to splunk web interface  http://127.0.0.1:8000  and http://10.10.10.211:8000  (ip of installation machine) 

every things works fine inside installation machine, and i am collecting logs from all the network machines,

but

when i try to login remotely from another windows machine by http://10.10.10.211  it dosent work and connection timeout

i tried to remotely telnet to port 8000 but connection time out

i can ping the splunk machine and every thing seems fine,

i stopped fiewalld service but nothing changed

i added allowRemoteLogin=always to server.conf and restarted splunk and nothing changed

why i cannont login to splunk web interface from another machine????

[isoutamo · Accepted solution]

Hi

this sounds like FW issue. Are those machines same or different subnet? If different then there must be FW openings between those subnets.

r. Ismo

[mpmalasd]

both machines are in the same subnet:

10.10.10.211(splunk server) and 1.10.10.214(windows)

thanks to your tip problem solved:

it was NETWORK FIREWALL RULES that denying connection between this two machine, i talk to network administrator and he allowd trrafic on port 8000 and now everything works fine

i really appreciate your help 

Thanks