topic Fresh splunk install - This site can’t be reached in Splunk Enterprise

Fresh splunk install - This site can’t be reached

inventsekar — Sat, 04 Jul 2020 15:36:49 GMT

Hi,

A fresh install of splunk enterprise on my ubuntu:

root@sekar:/opt/splunk/var/log/splunk# uname -a
Linux sekar.splunk.com 4.15.0-101-generic #102-Ubuntu SMP Mon May 11 10:07:26 UTC 2020 x86_64 x86_64 x86_64 GNU/Linux
root@sekar:/opt/splunk/var/log/splunk#

install went fine, service is running fine as well..

root@sekar:/opt/splunk/bin# ./splunk status
splunkd is running (PID: 5462).
splunk helpers are running (PIDs: 5463 5477 5550 5564).
root@sekar:/opt/splunk/bin#

port 8000 is used by splunkd only..

root@sekar:/opt/splunk/bin# lsof -i :8000
COMMAND PID USER FD TYPE DEVICE SIZE/OFF NODE NAME
splunkd 5462 root 112u IPv4 57851 0t0 TCP *:8000 (LISTEN)
root@sekar:/opt/splunk/bin#

still, the splunk web page is not loading up.. it says: This site can’t be reached

sekar.splunk.com took too long to respond.

Try:

Checking the connection
Checking the proxy and the firewall

ERR_CONNECTION_TIMED_OUT

please suggest. thanks.

Re: Fresh splunk install - This site can’t be reached

gcusello — Sat, 04 Jul 2020 16:31:39 GMT

Hi @inventsekar ,

some stupid questions:

did you disabled iptables or local firewalls?
did you checked the user running Splunk?

Ciao.

Giuseppe

Re: Fresh splunk install - This site can’t be reached

inventsekar — Sat, 04 Jul 2020 18:49:23 GMT

Hi @gcusello the local firewall is turned off,

ubuntu@sekar:~$ sudo ufw status
[sudo] password for ubuntu:
Status: inactive
ubuntu@sekar:~$

the user running the splunk process is root.

the issue is with the hostname "http://sekar.splunk.com:8000"

but, its connecting to 127.0.0.1 fine.. (http://127.0.0.1:8000/en-GB/account/login?return_to=%2Fen-GB%2F )

ok, i have setup this around 3 months ago..seems something broken, let me check it, thanks.