This topic lists the default ports and protocols used by the various product components, depending on user roles and permissions.
The following information is useful for one-time configurations, daily operations, and understanding how various product components communicate with one another. This information can also be used to decide which ports to open, depending on your security requirements.
Note
For a single server deployment, the Indexer and Configuration Database ports are not accessible from other hosts (by default). In this case, you do not need to set up a firewall for these ports.
Component | Default Port | From | To | Protocol |
---|---|---|---|---|
Useful for daily operations | ||||
Console Server | 9797 (configurable) | CLI/web browser | Console Server | HTTP |
9443 (configurable) | CLI/web browser | Console Server | HTTPS | |
Useful for data collection | ||||
Collection Station (Configuration Channel) | 8080 (configurable) | Collection Agent | Collection Station | HTTP |
Collection Station (Payload Service) | 41414 (configurable) | Collection Agent | Collection Station | Avro |
Managed node (target host from which you want to collect data) | 22 | Collection Station OR Collection Agent | Managed node from which data must be collected remotely | SSH |
Managed node (target host from which you want to collect data) | 445 | Collection Station OR Collection Agent | Managed node from which data must be collected remotely | SMB |
Useful for understanding internal communications between the IT Data Analytics product components *The following ports are internal and do not require any firewall changes for a single-server deployment. | ||||
Search | 9797 (configurable) | Console Server | Search | HTTP |
Configuration Database | 9999 (configurable) | Console Server | Configuration Database | JDBC |
9999 (configurable) | Search | Configuration Database | JDBC | |
9999 (configurable) | Collection Station | Configuration Database | JDBC | |
Indexer | 9300 (configurable) | Console Server | Indexer | TCP |
9300 (configurable) | Search | Indexer | TCP | |
9300 (configurable) | Collection Station | Indexer | TCP | |
Collection Station | 8080 (configurable) | Console Server | Collection Station | HTTP |
Useful for understanding communication between product components and integrations | ||||
Email integration | 25 | Search | SMTP server | SMTP |
25 | Console Server | SMTP server | SMTP | |
BMC ProactiveNet integration (Operations Console) | 80 (configurable) | Search | BMC ProactiveNet server | HTTP |
BMC TrueSight Presentation Server | 443 (configurable) | BMC TrueSight Presentation Server | HTTPS | |
BMC ProactiveNet cell integration (Event management) | 1828 | Search | BMC ProactiveNet server | TCP |
Collection Station | ||||
BMC Atrium Single-Sign On | 8443 (configurable) | Console Server | BMC Atrium Single-Sign On server | HTTPS |
For more information about the ports required for an HTTPS connection, see the instructions for configuring a secured connection.