×

Join the Conversation

Without signing in, you're just watching from the sidelines. Sign in or Register to connect, share, and be part of the Splunk Community.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Ask a Question
KSluchanko
Engager
Member since: ‎02-09-2020
‎06-05-2020
Community Statistics
Posts 4
Solutions 0
Karma Given 1
Karma Received 0
Member Since ‎02-09-2020
Activity Feed
View All

Re: Splunk Web is not accessible from remote compu...

by in Security
‎02-11-2020 04:21 AM
‎02-11-2020 04:21 AM
This server is quick solution for temporary use in isolated environment - so it does not matter much. Then it will be reinstalled. ... View more

Re: Splunk Web is not accessible from remote compu...

by in Security
‎02-11-2020 04:19 AM
‎02-11-2020 04:19 AM
Look at initial post. It's Ubuntu 18.04, upgraded from 16.04. It uses ufw by default (and, of course, I've checked 'ufw status' output), and I've tried other options like 'firewall-cmd --state'. So I still think that such kind of 'stealth' firewall configuration is not the best way to operate. ... View more

Re: Splunk Web is not accessible from remote compu...

by in Security
‎02-09-2020 07:49 PM
‎02-09-2020 07:49 PM
Hi Martin, There are no any firewall in effect on the server, as I mentioned above. This is not a point. Best regards, Cyril UPDATE: Well, I was completely wrong. After some additional investigations I found that negative output of "systemctl status iptables" and "service status iptables" on this server means nothing. Thanks to the guy that have installed and tuned it this way. Resetting default policy to ACCEPT done the thing. Thanks, Martin. ... View more

Splunk Web is not accessible from remote computers

by in Security
‎02-09-2020 08:12 AM
‎02-09-2020 08:12 AM
Hello, I have Splunk 8.0.1 installed on Ububntu 18.04.4 LTS. I can connect to port 8000 from the same server with any URL (localhost, 127.0.0.1, server name, server IP address). I can see login page if I use SSH tunneling connecting from remote host with redirect to localhost:8000. But I cannot connect from remote host entering any valid URL to browser - connection times out. I have no firewall on my server. I have all Splunk services running and all services ports listening. I can see incoming packets with tcpdump - but no replies. I can connect to other services (SSH and Apache, for example) on my server. There are no errors in log files - and no events for incoming connections in web_access.log. What else have I to check? Best regards, Cyril ... View more
Contact Me
Online Status
Offline
Date Last Visited
‎06-05-2020 02:03 AM
Karma given to
View All