Security

although i can login to splunk web inside installation machin, cant remotely connect to splunk web interface

mpmalasd
Engager

I installed splunk on a centos 8 machin

 

firewall-cmd allowed port 8000, 8089, 80, 443, 9997 etc.

 

i can login to splunk web interface  http://127.0.0.1:8000  and http://10.10.10.211:8000  (ip of installation machine) 

 

every things works fine inside installation machine, and i am collecting logs from all the network machines,

 

but

 

when i try to login remotely from another windows machine by http://10.10.10.211  it dosent work and connection timeout

 

i tried to remotely telnet to port 8000 but connection time out

 

i can ping the splunk machine and every thing seems fine,

 

i stopped fiewalld service but nothing changed

i added allowRemoteLogin=always to server.conf and restarted splunk and nothing changed

why i cannont login to splunk web interface from another machine????

Labels (1)
Tags (2)
0 Karma
1 Solution

isoutamo
SplunkTrust
SplunkTrust

Hi

this sounds like FW issue. Are those machines same or different subnet? If different then there must be FW openings between those subnets.

r. Ismo

View solution in original post

isoutamo
SplunkTrust
SplunkTrust

Hi

this sounds like FW issue. Are those machines same or different subnet? If different then there must be FW openings between those subnets.

r. Ismo

mpmalasd
Engager

both machines are in the same subnet:

10.10.10.211(splunk server) and 1.10.10.214(windows)

 

thanks to your tip problem solved:

it was NETWORK FIREWALL RULES that denying connection between this two machine, i talk to network administrator and he allowd trrafic on port 8000 and now everything works fine

 

i really appreciate your help 

Thanks

 

0 Karma
Get Updates on the Splunk Community!

Index This | I am a number, but when you add ‘G’ to me, I go away. What number am I?

March 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...

What’s New in Splunk App for PCI Compliance 5.3.1?

The Splunk App for PCI Compliance allows customers to extend the power of their existing Splunk solution with ...

Extending Observability Content to Splunk Cloud

Register to join us !   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to ...