topic Re: I need help accessing web interface in Security

I need help accessing web interface

syx093 — Fri, 31 Jul 2015 17:44:42 GMT

I accidentally overwrote my bin directory for my laptop running centos 7, which was my splunk server. After reinstalling the os and splunk, I am now unable to get access to the splunk web interface. I checked to see if port 8000 was open using nmap and it was. The output was:

PORT      STATE     SERVICE
8000       open      http-alt

Is there something I am missing because the web interface will not load and it just sits there.

Re: I need help accessing web interface

woodcock — Fri, 31 Jul 2015 19:12:57 GMT

You can have the port open but still be blocking with a firewall. Did you check iptables and make sure that port is open (you can turn it off entirely just to be sure that is not blocking it)? Have you tried to telnet to it on localhost? If you can't, it has to be the firewall.

Re: I need help accessing web interface

syx093 — Fri, 31 Jul 2015 20:00:29 GMT

I tried to telnet into the localhost and I was blocked. I have been trying to make an exception in the firewall but I have been making no success. Do know of a way to open up a port in the fire wall?

Re: I need help accessing web interface

woodcock — Fri, 31 Jul 2015 20:07:56 GMT

First you need to identify what firewall is included in your distribution (it may or may not be iptables). Then, to test, turn the firewall completely off and see if it works.

Re: I need help accessing web interface

syx093 — Fri, 31 Jul 2015 20:12:17 GMT

I was able to open up a port in the firewall (tested it with telnet successfully) and I test it when the firewall was disable and I still cannot load into my splunk web interface.

Re: I need help accessing web interface

syx093 — Mon, 03 Aug 2015 12:36:28 GMT

I finally got it to work but how I got it to work does not make sense. I had to turn off the wifi or internet access in order to finally log into the splunk web interface. Why did it suddenly start working after that?