Hello, I am attempting to install splunk on a fresh install of an ubuntu server 20 VM. This VM is on ESXi, with a pfSense VM running to route traffic, and a few other VM's to create a malware analysis lab. My issue right now, is I cannot seem to get into the web interface for Splunk Enterprise. I have tried several things; I have made sure that splunk is running on port 8000 and listening, I have disabled iptables, added a pass everything rule on each of my pfSense interfaces, ensured that it is started, the status says that it started correctly, and no errors in the log files. I am currently able to ping from the VM that splunk is on to my laptop, but am not able to ping from my laptop to my VM. I can open any of the other VM's. I opened wireshark and attempted to look at what was happening, and it seems that when I send a ping to the laptop from the splunk vm, it comes through to my laptop successfully. When i send it from my laptop to the VM, it does not get any response and keeps retrying the packets. Can anyone help?
... View more