https://community.splunk.com/t5/Security/Running-Splunkweb-on-localhost/m-p/58017#M1942 <P>What is the best practice for making Splunkweb listen only on localhost or 127.0.0.1?</P> <P>Thx.</P> <P>Craig</P> Wed, 25 Jan 2012 20:54:03 GMT mundus 2012-01-25T20:54:03Z https://community.splunk.com/t5/Security/Running-Splunkweb-on-localhost/m-p/58017#M1942 <P>What is the best practice for making Splunkweb listen only on localhost or 127.0.0.1?</P> <P>Thx.</P> <P>Craig</P> Wed, 25 Jan 2012 20:54:03 GMT https://community.splunk.com/t5/Security/Running-Splunkweb-on-localhost/m-p/58017#M1942 mundus 2012-01-25T20:54:03Z https://community.splunk.com/t5/Security/Running-Splunkweb-on-localhost/m-p/58018#M1943 <P>The "best" practice is up to you to determine, but you can make the SplunkWeb process only listen by setting <CODE>server.sockethost = 127.0.0.1</CODE> in the web.conf file. If this is a concern to you, you may also want to use <CODE>iptables</CODE> or another firewall.</P> Thu, 26 Jan 2012 05:42:08 GMT https://community.splunk.com/t5/Security/Running-Splunkweb-on-localhost/m-p/58018#M1943 gkanapathy 2012-01-26T05:42:08Z https://community.splunk.com/t5/Security/Running-Splunkweb-on-localhost/m-p/58019#M1944 <P>Slight correction. The setting is <CODE>server.socket_host</CODE> not <CODE>server.sockethost</CODE><BR /> Also setting it as <BR /> <CODE>server.socket_host = localhost</CODE> <BR /> allows for IPv6 support vs 127.0.0.1 which only works in IPv4</P> Mon, 01 Aug 2016 20:56:57 GMT https://community.splunk.com/t5/Security/Running-Splunkweb-on-localhost/m-p/58019#M1944 tmcwaters 2016-08-01T20:56:57Z