I inherited a [mostly] working Splunk 6.2.2 multi server test environment which I am in the process of upgrading to 6.2.3. Search Head seems to have gone fine, same with Index Master but the Indexers themselves can't be remotely accessed via their web interfaces (they were accessible before the upgrade). Splunk opens the port to listen, I am using the correct port, SSL, no hardware firewall comes into play, no software firewall comes into play... if I telnet from a remote host to an Indexer I can see, on the Indexer, via netstat that the connection gets established.
Being brand new to Splunk I'm currently at a loss.
Your guidance is much appreciated.
↧