Building for the Splunk Platform

How to connect C# SDK sample to Splunk Enterprise created from Azure?

ponsakthi
Engager

I have created Splunk Enterprise Server from Azure market place.
I am now trying to connect to this server from C# sdk using the server name and port(8089). But I get an error

An error occurred while sending the
request

I have disabled Server certificate validation on the C# sample.

    ServicePointManager.SecurityProtocol = SecurityProtocolType.Ssl3;
    ServicePointManager.ServerCertificateValidationCallback += (sender, certificate, chain, sslPolicyErrors) => true;

Also, as per the tutorial when I try to navigate to scheme://host:port for the azure server, I get ERR_CONNECTION_TIMED_OUT
https://servername.azure.com:8089/

Is there any other settings that I have to configure on Server?

Tags (2)
0 Karma

rarsan_splunk
Splunk Employee
Splunk Employee

Splunk in Azure Marketplace deploys Splunk instance(s) within a newly created virtual network (vnet). By default, Splunk management port 8089 is open only to the private virtual network for security reasons. You could manually change that to allow traffic from a particular CIDR range or the public internet. From the Azure portal, browse to the network security group which was created by the template for the server(s) in question, and update the inbound security rule named "Allow-Mgmt-From-VNET". Alternatively, you could of course run the C# client from within the vnet.
Hope this helps.

0 Karma

martin_mueller
SplunkTrust
SplunkTrust

Assuming all parameters are correct, a timeout usually means blocking firewalls.

Can you telnet to the management port?

0 Karma
Get Updates on the Splunk Community!

Introducing Ingest Actions: Filter, Mask, Route, Repeat

WATCH NOW Ingest Actions (IA) is the best new way to easily filter, mask and route your data in Splunk® ...

Splunk Forwarders and Forced Time Based Load Balancing

Splunk customers use universal forwarders to collect and send data to Splunk. A universal forwarder can send ...

NEW! Log Views in Splunk Observability Dashboards Gives Context From a Single Page

Today, Splunk Observability releases log views, a new feature for users to add their logs data from Splunk Log ...