- Splunk Answers
- :
- Splunk Administration
- :
- Monitoring Splunk
- :
- Change splunkd management port on Universal forwar...
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark Topic
- Subscribe to Topic
- Mute Topic
- Printer Friendly Page
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
I would like to change the splunk management port from 8089 to some higher port say 9089. What is the best way to do this? Should i use the Splunk CLI or change it using web.conf file? Also I am using a deployment server to manage the UF. Should I change the port on deployment server as well?
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Here is the way to change the default splunk forwarder management port:
In "/etc/system/local", add the following file and contents:
web.conf with
[settings]
mgmtHostPort = 127.0.0.1:9089
and restart splunk.
It will be like this.
Splunk Server OR DS(ANY)->UF(9089)
UF(ANY)->DS(8089)
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Otherwise you can change splunkd port via Web UI or by CLI as mentioned in this answer:
https://answers.splunk.com/answers/67/how-do-i-change-the-ports-that-splunk-listens-on.html
NOTE: The way you change Management Port by Web UI has changed:
- Log in as Admin
- Go to Settings
- Go to Server settings
- Look for Management port and change it
- Save your work!
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Here is the way to change the default splunk forwarder management port:
In "/etc/system/local", add the following file and contents:
web.conf with
[settings]
mgmtHostPort = 127.0.0.1:9089
and restart splunk.
It will be like this.
Splunk Server OR DS(ANY)->UF(9089)
UF(ANY)->DS(8089)
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Ok so we dont need to change anything in deployment server right?
Threat Hunting Unlocked: How to Uplevel Your Threat Hunting With the PEAK Framework ...
Splunk APM: New Product Features + Community Office Hours Recap!
Index This | Forward, I’m heavy; backward, I’m not. What am I?
