firewall access for splunk servers

Hi All -

Could you confirm that I have the connectivity ports correct or if I’m missing any? I just want to use the default port configurations at this point. I have installed splunk on a single server and will be installing the universal forwarder to 3 other servers to forward the data back to the main server.

from Desktop Web Clients to Main Splunk Server using http on port 8000
from Client Servers to Main Splunk Server using tcp/udp on port 9997 for universal forwarder from Client Servers to Main Splunk Server using tcp on port 8089 for Management Communication ***Does this one need to go back to those client servers with UF?

Thanks!