If you decide that a heavy forwarder makes sense for your architecture based on the points above, you will send the data from the SAP system to the heavy forwarder using port 8088. Ports to be open on Search Head & Deployer 5. Ports to be open on Indexer & Indexer Cluster & Master 4. For Splunk Enterprise, port 8088 needs to be open, and for Splunk Cloud, port 443 needs to be open for outbound web traffic (i.e., data flowing from SAP to Splunk). Ports to be open ON Universal Forwarder 2. Required network ports cannot be opened by the network team. The customer already uses a heavy forwarder in their existing environment architecture 8000 for clients to the Splunk Search page 8089 for splunkd (also used by deployment server). IT Security team expresses concerns with allowing the SAP system to communicate directly outside of the internal firewall 9997 for forwarders to the Splunk indexer. managementport is the TCP management port on the indexer (default: 8089.) tokenname is the friendly name that you want to assign the token. host is the host name or IP address of the indexer.
splunk add forward-serverSPLUNK FORWARDER PORT PASSWORD
Below is a list of considerations that can help customers determine whether a heavy forwarder should be included in their PowerConnect architecture: In this command: user and password are the administrative credentials youll use to log into the Splunk platform indexer. docker pull splunk/universalforwarder:latest. However, some customers may opt to use a Splunk heavy forwarder maintained in the same network as their SAP system, and then forward the data from the heavy forwarder to either their Splunk Enterprise or Splunk Cloud environment. Confirm that you can reach the Splunk Servers at or telnet port 8089 and :9997. This is the preferred method for integrating the Splunk and SAP systems because it requires the least number of connections to send the data (reducing potential failure points) and reduces customer infrastructure costs.
su splunk -c /opt/splunkforwarder/bin/splunk set deploy-pollSpecify port 514, which is the default PTA listener port for TCP and UDP. optional if you want to use the Deployment Server feature of your splunk server.
The PowerConnect application can connect directly to both Splunk Enterprise and Splunk Cloud environments from the SAP system if the appropriate networks ports are open.
0 kommentar(er)
