Getting Data In

Why is universal forwarder installation failing with error "Could not bind to port 8089" using the deployment server option hostname:port (8089)?

brentgunn
New Member

Installing universal forwarder is failing because it cannot bind to TCP 8089.

My understanding of TCP communications is this:
Client reaches out to destination server via a dynamic TCP Port to a destination TCP port which is static. (server is listening on static port 8089)

If that is accurate:
When installing the universal forwarder on a client and using the deployment server option hostname:port (8089), why is the install failing because a process already has the 8089 port in use (on the client).

If my understanding is correct, then the client shouldn't care if it already has a process listening on TCP 8089 because when it reaches out to the indexer hostname:8089 it will be sourcing from a dynamic tcp port.

Bottom line, I cannot get the universal forwarder because w3wp.exe is already using 8089 on my client and I cannot change it.

Thanks in advance for any help.

FROM SPLUNKD.LOG

06-16-2016 15:37:27.372 -0500 FATAL HTTPServer - Could not bind to port 8089
0 Karma
1 Solution

ryanoconnor
Builder

You can always disable port 8089 if you don't intend to remotely manage the Universal Forwarder.

http://docs.splunk.com/Documentation/Splunk/6.4.1/admin/Serverconf

See the section for disableDefaultPort

View solution in original post

0 Karma

ddrillic
Ultra Champion

Something is weird here because the logging of the installation goes to /splunkforwarder/var/log/splunk/first_install.log and upgrades of the forwarder would go to migration.log.<date> and then when the product comes up the logging goes to splunkd.log.

When the installation is complete, the deployment server configuration is at /splunkforwarder/etc/system/local/deploymentclient.conf, which can be changed.

0 Karma

ryanoconnor
Builder

You can always disable port 8089 if you don't intend to remotely manage the Universal Forwarder.

http://docs.splunk.com/Documentation/Splunk/6.4.1/admin/Serverconf

See the section for disableDefaultPort

0 Karma

brentgunn
New Member

Wow thanks for the prompt reply.
I saw that, but that is post install though.

It wont install because the server is using 8089.
I tried installing it with a different port for the distribution server but it didnt work.

Any ideas on how to install it with a different port or disabled?

0 Karma

ryanoconnor
Builder

Ah sorry about that! During the initial install you should be able to set a number of different parameters like SPLUNKD_PORT. Take a look at the following doc:

http://docs.splunk.com/Documentation/Splunk/6.4.1/Installation/InstallonWindowsviathecommandline

brentgunn
New Member

Sorry for the delay - i was able to use the install switch and use a different port on the source port side. Working great.
Thanks!

0 Karma
Get Updates on the Splunk Community!

Index This | I am a number, but when you add ‘G’ to me, I go away. What number am I?

March 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...

What’s New in Splunk App for PCI Compliance 5.3.1?

The Splunk App for PCI Compliance allows customers to extend the power of their existing Splunk solution with ...

Extending Observability Content to Splunk Cloud

Register to join us !   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to ...