Installation

Installing Splunk, and Web Interface is pointing to local host address 127.0.0.1 (after installation)

jmartelon
New Member

Hello,

I have installed splunk on my CentOS7 box in the default folder /opt/splunk.

After running the command sudo /opt/splunk/bin/splunk start --accept-license it shows the web interface is set to http://127.0.0.1:8000

How do I change this to set this to this boxes eth0 IP Address?

Labels (1)
0 Karma

nickhills
Ultra Champion

The message Splunk reports on startup is a bit misleading.

Splunk will actually be listening on 0.0.0.0, which means it will respond on any network interface your host has.
The startup message is merely confirming that even if you have no network accessible nic, you could still access it on the loopback interface.

If my comment helps, please give it a thumbs up!
0 Karma

harsmarvania57
Ultra Champion

Hi,

Can you please check output of netstat -ntpul | grep 8000, is it showing 127.0.0.1:8000 or something else?

0 Karma

jmartelon
New Member

Here is my output

netstat -ntpul | grep 8000
tcp 0 0 0.0.0.0:8000 0.0.0.0:* LISTEN 21621/splunkd

0 Karma

harsmarvania57
Ultra Champion

This means splunk is running perfectly fine and will accept traffic from all IP address. As mentioned by @nickhillscpl, message displayed while starting splunk is misleading. You can access splunk from any machine using URL http://<IP Address/Hostname>:8000

0 Karma
Get Updates on the Splunk Community!

Join Us for Splunk University and Get Your Bootcamp Game On!

If you know, you know! Splunk University is the vibe this summer so register today for bootcamps galore ...

.conf24 | Learning Tracks for Security, Observability, Platform, and Developers!

.conf24 is taking place at The Venetian in Las Vegas from June 11 - 14. Continue reading to learn about the ...

Announcing Scheduled Export GA for Dashboard Studio

We're excited to announce the general availability of Scheduled Export for Dashboard Studio. Starting in ...