All Apps and Add-ons

How to change web address?

Ecklory
Explorer

How to change 127.0.0.1\test -> 192.168.1.5 ?

alt text

p.s. Linux (ubuntu 14.04) \ splunk enterprise

Tags (1)
0 Karma

Ecklory
Explorer

I need help, those who have still any ideas?

0 Karma

renjith_nair
SplunkTrust
SplunkTrust

have you tried the option i have given above? by updating splunk-launch.conf?

Happy Splunking!
0 Karma

koshyk
Super Champion

Answer from renjith.nair is perfectly correct. But what I would do in an enteprise/corporate system is to create a separate app with various "splunk" web configurations and then put entry into the "local" of it.

eg of new app: myapp_prod_web_confs
put an entry into "myapp_prod_web_confs/local/web.conf" and put your entries into that. Copy the app (or push the app) and restart

0 Karma

Ecklory
Explorer

koshyk
Understood nothing...

p.s. Me have splunk enterprise.

0 Karma

renjith_nair
SplunkTrust
SplunkTrust

If you want to bind your splunk instance to a particular ip rather than bind to default, then you can change it by setting SPLUNK_BINDIP parameter in splunk-launch.conf in etc folder of your splunk installation.

CAUTION : When using this setting you must update mgmtHostPort in web.conf to match, or the command line and splunkweb will not know how to reach splunkd.

SPLUNK_BINDIP=<ip address>
* Specifies an interface that splunkd and splunkweb should bind to, as
  opposed to binding to the default for the local operating system.
* If unset, Splunk makes no specific request to the operating system when
  binding to ports/opening a listening socket.  This means it effectively
  binds to '*'; i.e.  an unspecified bind.  The exact result of this is
  controlled by operating system behavior and configuration.
* NOTE: When using this setting you must update mgmtHostPort in web.conf to
  match, or the command line and splunkweb will not know how to
  reach splunkd.
* For splunkd, this sets both the management port and the receiving ports
  (from forwarders).
* Useful for a host with multiple IP addresses, either to enable
  access or restrict access; though firewalling is typically a superior
  method of restriction.
* Overrides the Splunkweb-specific web.conf/[settings]/server.socket_host
  param; the latter is preferred when SplunkWeb behavior is the focus.
* Defaults to unset.
Happy Splunking!
0 Karma

Ecklory
Explorer

alt text

README ? conf.spec?
Can splunk-launch.conf move in /opt/splunk/etc ?

0 Karma

renjith_nair
SplunkTrust
SplunkTrust

Yes the location of splunk-launch.conf is in /opt/splunk/etc/.

Reference : http://docs.splunk.com/Documentation/Splunk/6.4.3/Admin/Splunk-launchconf#splunk-launch.conf.spec

# Note: this conf file is different from most splunk conf files.  There is
# only one in the whole system, located at
# $SPLUNK_HOME/etc/splunk-launch.conf; further, there are no stanzas,
# explicit or implicit.  Finally, any splunk-launch.conf files in
# etc/apps/... or etc/users/... will be ignored
Happy Splunking!
0 Karma
Get Updates on the Splunk Community!

What's new in Splunk Cloud Platform 9.1.2312?

Hi Splunky people! We are excited to share the newest updates in Splunk Cloud Platform 9.1.2312! Analysts can ...

What’s New in Splunk Security Essentials 3.8.0?

Splunk Security Essentials (SSE) is an app that can amplify the power of your existing Splunk Cloud Platform, ...

Let’s Get You Certified – Vegas-Style at .conf24

Are you ready to level up your Splunk game? Then, let’s get you certified live at .conf24 – our annual user ...