Home → Support →

open FW ports for splunk

• Edit

nicolewells.n

23 Feb, 2018 09:55 AM

I need to open up some firewall ports so that the splunk agent on our servers can communicate with Splunk.

Our splunk setup is split up into the following services and ports:

 Splunk Web/API 443, 8009, 8090, 8089
 Splunk Cluster Master 8000, 8001
 Splunk Deployment Server 8000, 8002, 8089
 Splunk Intermediate Forwarder TCP:6514:6514,6515,6516
                               TCP:514:10514,10515,10516
                               TCP:9997:9997,9998,9999
                               TCP:11514:11514
                               TCP:11515:11515
                               TCP:11516:11516
                               TCP:11517:11517
What ports do I need to open so that the [splunk](https://goo.gl/MKkBU5) agent can ship logs to the splunk server? So that all logs from that server that you specify in the config will show up in the splunk interface?

Help me out!

Thanks

1. Support Staff 1 Posted by rune on 27 Feb, 2018 08:09 AM

   

   Hi,

   I'm not sure I understand entirely -- you want to send logs to a Splunk server from your AppHarbor app, right? If so I don't you'll need to configure anything on the AppHarbor end as you can make outbound requests to any TCP services alread as (outbound traffic isn't restricted.

   You may however have to set up the Splunk side of the integration to allow requests from AppHarbor servers. If that's the case you'll need the IP ranges AppHarbor apps make requests from, which you can find in this knowledge base article.

   Best,
   Rune

   • Edit