Installation

How to access a Splunk 6.1.4 search head behind a load balancer via direct individual URL to view license usage information?

vsingla1
Communicator

I have two search heads that are behind a load balancer in Splunk 6.1.4. They work fine when accessing via the load balancer, but if I try their individual URL to login into respective search head, I am unable to do so.

Here is my scenario:
One search head is a master license server and the other search head is its slave. If I want to see the license usage information and log in via load balancer, I do not know which search head I will be directed to. If the load balancer directs me to the slave, then I am unable to view the license usage info since the slave does not have it, only the master does.

So in this scenario, it will be helpful if I can selectively go to the master server via direct http link URL.
The web.conf looks like below:
[settings]

mgmtHostPort = <10.3.4.6>:8089
httpport = 8000
enableSplunkWebSSL = false
updateCheckerBaseURL = 0
server.socket_host = 10.3.4.6

I am trying to access the URL http://10.3.4.6:8000 but it does not work. What am I missing here?

Labels (1)
0 Karma

somesoni2
SplunkTrust
SplunkTrust

I have similar setup and since we're using a Load balancer, the firewall rules for the Search Heads are configured to allow connection only through the load balancer IP/ CNAM. So, that's the reason the Search Head is not accessible directly.

IMO, you've two options:-

  1. Configure appropriate firewall rules for your Search Head/License server node to allow connection outside of Load balancer.
  2. [Recommended] Install Splunk Health Overview app, which provides license usage dashboard. This you can install on either of the search head. A pre-requisite would be to add other search head as Distributed search peer. (so both the search head will have other search head added as search peer.
0 Karma

vsingla1
Communicator

I need license file information where it shows the license expiry date, type of license etc. Splunk fetches this information from $SPLUNK_HOME/etc/licenses/enterprise/. I installed this app but unfortunately it does not provide that kind of information.

0 Karma
Get Updates on the Splunk Community!

Index This | I am a number, but when you add ‘G’ to me, I go away. What number am I?

March 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...

What’s New in Splunk App for PCI Compliance 5.3.1?

The Splunk App for PCI Compliance allows customers to extend the power of their existing Splunk solution with ...

Extending Observability Content to Splunk Cloud

Register to join us !   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to ...