Splunk installation in a secure facility. I see the following blocked attempts to phone-home in our logs and infosec is unhappy. How do I prevent Splunk from phoning home every 15 seconds?
TCP_DENIED/403 3836 CONNECT beam.scs.splunk.com:443 - HIER_NONE/- text/html
TCP_DENIED/403 3906 CONNECT quickdraw.splunk.com:443 - HIER_NONE/- text/html
Splunk Enterprise
Version:9.3.1
Build:0b8d769cb912
The following instructions seem to remedy 99% of the issues:
docs.splunk.com/Documentation/Splunk/9.3.1/Admin/Shareperformancedata#How_to_opt_out
Apologies for the noise.