Installation

Installing Splunk, and Web Interface is pointing to local host address 127.0.0.1 (after installation)

jmartelon
New Member

Hello,

I have installed splunk on my CentOS7 box in the default folder /opt/splunk.

After running the command sudo /opt/splunk/bin/splunk start --accept-license it shows the web interface is set to http://127.0.0.1:8000

How do I change this to set this to this boxes eth0 IP Address?

Labels (1)
0 Karma

nickhills
Ultra Champion

The message Splunk reports on startup is a bit misleading.

Splunk will actually be listening on 0.0.0.0, which means it will respond on any network interface your host has.
The startup message is merely confirming that even if you have no network accessible nic, you could still access it on the loopback interface.

If my comment helps, please give it a thumbs up!
0 Karma

harsmarvania57
Ultra Champion

Hi,

Can you please check output of netstat -ntpul | grep 8000, is it showing 127.0.0.1:8000 or something else?

0 Karma

jmartelon
New Member

Here is my output

netstat -ntpul | grep 8000
tcp 0 0 0.0.0.0:8000 0.0.0.0:* LISTEN 21621/splunkd

0 Karma

harsmarvania57
Ultra Champion

This means splunk is running perfectly fine and will accept traffic from all IP address. As mentioned by @nickhillscpl, message displayed while starting splunk is misleading. You can access splunk from any machine using URL http://<IP Address/Hostname>:8000

0 Karma
Get Updates on the Splunk Community!

Stay Connected: Your Guide to May Tech Talks, Office Hours, and Webinars!

Take a look below to explore our upcoming Community Office Hours, Tech Talks, and Webinars this month. This ...

They're back! Join the SplunkTrust and MVP at .conf24

With our highly anticipated annual conference, .conf, comes the fez-wearers you can trust! The SplunkTrust, as ...

Enterprise Security Content Update (ESCU) | New Releases

Last month, the Splunk Threat Research Team had two releases of new security content via the Enterprise ...