How to open a port to allow Node_Exporter metrics to be scraped?

[jklab91]

Version

2.4.80

Installation Method

Security Onion ISO image

Description

configuration

Installation Type

Standalone

Location

on-prem with Internet access

Hardware Specs

Exceeds minimum requirements

CPU

16

RAM

24

Storage for /

400GB

Storage for /nsm

400GB

Network Traffic Collection

span port

Network Traffic Speeds

1Gbps to 10Gbps

Status

Yes, all services on all nodes are running OK

Salt Status

No, there are no failures

Logs

No, there are no additional clues

Detail

Been searching high and low but haven't gotten anything useful. I'm trying to allow my Prometheus instance to scrape my Security Onion server to track stats but am ahving trouble getting port 9100 open.

I initially tried Firewalld and it works but it looks like Security Onion periodically checks if Firewalld is running and disables it? I'm not sure how to enable inbound on 9100 for the purposes of log scraping. so-firewall doesn't look like it allows ports and I tried adding :9100 in port groups but that's not doing it either. Any assistance would be greatly appreciated.

Guidelines

• I have read the discussion guidelines at Read before posting! #1720 and assert that I have followed the guidelines.