All Apps and Add-ons

How to change web address?

Ecklory
Explorer

How to change 127.0.0.1\test -> 192.168.1.5 ?

alt text

p.s. Linux (ubuntu 14.04) \ splunk enterprise

Tags (1)
0 Karma

Ecklory
Explorer

I need help, those who have still any ideas?

0 Karma

renjith_nair
SplunkTrust
SplunkTrust

have you tried the option i have given above? by updating splunk-launch.conf?

Happy Splunking!
0 Karma

koshyk
Super Champion

Answer from renjith.nair is perfectly correct. But what I would do in an enteprise/corporate system is to create a separate app with various "splunk" web configurations and then put entry into the "local" of it.

eg of new app: myapp_prod_web_confs
put an entry into "myapp_prod_web_confs/local/web.conf" and put your entries into that. Copy the app (or push the app) and restart

0 Karma

Ecklory
Explorer

koshyk
Understood nothing...

p.s. Me have splunk enterprise.

0 Karma

renjith_nair
SplunkTrust
SplunkTrust

If you want to bind your splunk instance to a particular ip rather than bind to default, then you can change it by setting SPLUNK_BINDIP parameter in splunk-launch.conf in etc folder of your splunk installation.

CAUTION : When using this setting you must update mgmtHostPort in web.conf to match, or the command line and splunkweb will not know how to reach splunkd.

SPLUNK_BINDIP=<ip address>
* Specifies an interface that splunkd and splunkweb should bind to, as
  opposed to binding to the default for the local operating system.
* If unset, Splunk makes no specific request to the operating system when
  binding to ports/opening a listening socket.  This means it effectively
  binds to '*'; i.e.  an unspecified bind.  The exact result of this is
  controlled by operating system behavior and configuration.
* NOTE: When using this setting you must update mgmtHostPort in web.conf to
  match, or the command line and splunkweb will not know how to
  reach splunkd.
* For splunkd, this sets both the management port and the receiving ports
  (from forwarders).
* Useful for a host with multiple IP addresses, either to enable
  access or restrict access; though firewalling is typically a superior
  method of restriction.
* Overrides the Splunkweb-specific web.conf/[settings]/server.socket_host
  param; the latter is preferred when SplunkWeb behavior is the focus.
* Defaults to unset.
Happy Splunking!
0 Karma

Ecklory
Explorer

alt text

README ? conf.spec?
Can splunk-launch.conf move in /opt/splunk/etc ?

0 Karma

renjith_nair
SplunkTrust
SplunkTrust

Yes the location of splunk-launch.conf is in /opt/splunk/etc/.

Reference : http://docs.splunk.com/Documentation/Splunk/6.4.3/Admin/Splunk-launchconf#splunk-launch.conf.spec

# Note: this conf file is different from most splunk conf files.  There is
# only one in the whole system, located at
# $SPLUNK_HOME/etc/splunk-launch.conf; further, there are no stanzas,
# explicit or implicit.  Finally, any splunk-launch.conf files in
# etc/apps/... or etc/users/... will be ignored
Happy Splunking!
0 Karma
Get Updates on the Splunk Community!

Index This | I am a number, but when you add ‘G’ to me, I go away. What number am I?

March 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...

What’s New in Splunk App for PCI Compliance 5.3.1?

The Splunk App for PCI Compliance allows customers to extend the power of their existing Splunk solution with ...

Extending Observability Content to Splunk Cloud

Register to join us !   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to ...