Deployment Architecture

splunk web interface is not working on live server .

Piyush_Aghera
New Member

I have installed splunk in local ubuntu and working fine. i got web interface and server started on port 8000. Now i want to install splunk on my live production server. i have installed rpm package successfuly and also started daemon on port 8000. but i cant able to access web interface on internet. is port 8000 not accessible from public ?

Tags (3)
0 Karma

MHibbin
Influencer

There are many things that you can check, but the most common would be firewall issues, this can both be network firewalls or local firewalls (e.g. iptables). You should start by looking at this root to check there is connectivity being allowed.

Also, is it possible to log-on to the WebUI from the server (i.e. locally) to check the service/daemon is working correctly?

Regs,

MHibbin

0 Karma

yannK
Splunk Employee
Splunk Employee
  • verify that the port is open locally
    use : netstat -an | grep 8000

  • test that you are not using ssl for splunkweb :
    with https://myserver:8000

  • Check that your server doesn't have a firewall service
    (classic one is iptables)

  • Ask your network administrator/security admin if the port 8000 is not blocked to external users by a firewall/router.

Get Updates on the Splunk Community!

What's new in Splunk Cloud Platform 9.1.2312?

Hi Splunky people! We are excited to share the newest updates in Splunk Cloud Platform 9.1.2312! Analysts can ...

What’s New in Splunk Security Essentials 3.8.0?

Splunk Security Essentials (SSE) is an app that can amplify the power of your existing Splunk Cloud Platform, ...

Let’s Get You Certified – Vegas-Style at .conf24

Are you ready to level up your Splunk game? Then, let’s get you certified live at .conf24 – our annual user ...