@IRJ said in Splunk vs iptables: iptables -A OUTPUT -o eth0 -p tcp --sport 9997 -m state --state NEW,ESTABLISHED -j ACCEPT Looks like the solution was iptables -A INPUT -i lo -j ACCEPT iptables -A OUTPUT -o lo -j ACCEPT Or at least that got it working.

@Aaron-Studer said: Splunk Cloud http://www.splunk.com/goto/cloud Just launched. Ah, the competition is heating up.

@ajstringham It is very handy! But steep learning curve. I attended a demo conference at the beginning of January up in Orlando. It was very classy and very informational. They know how to throw a good shin-dig. There is an annual user conference in Las Vegas in October, I think. Analogous to Spice World.