Security compliance for cloud-based machine data acquisition and search system

A computer system configured to implement at least a first data forwarder of a distributed machine data acquisition and search system (MDASS), the computer system comprising:

• a communication device through which the data forwarder can communicate with a proxy node that regulates traversal of a firewall that protects a protected environment within which the computer system operates;
• and
• at least one processor operatively coupled to the communication device and configured to execute operations including
• authenticating, by using a SOCKS5authentication process, the first data forwarder of the MDASS to a proxy node, the first data forwarder operating inside the protected environment;
• and
• only after successful completion of the SOCKS5 authentication process,
• establishing a first connection, through the a network, between the first data forwarder and a first indexer of the distributed MDASS, the first indexer operating outside the protected environment;
• and
• sending machine data, acquired by the first data forwarder from a machine data source, to the first indexer via the first connection.

A non-transitory machine-readable storage medium for use in a processing system, the non-transitory machine-readable storage medium storing instructions, an execution of which in the processing system causes the processing system to perform operations comprising:

• authenticating a first data forwarder of a distributed machine data acquisition and search system (MDASS) to a proxy node, by using a SOCKS5 authentication process, the first data forwarder operating inside a protected environment established by a firewall, traversal of which is regulated by the proxy node;
• and
• only after successful completion of the SOCKS5 authentication process,
• establishing a first connection, through a network, between the first data forwarder and a first indexer of the distributed MDASS, the first indexer operating outside the protected environment;
• and
• sending machine data acquired by the first data forwarder from a machine data source, to the first indexer via the first connection.