topic Bind separate IP for Web & Daemon in Splunk Dev

Bind separate IP for Web & Daemon

deyeo — Mon, 28 Sep 2020 10:08:09 GMT

My server has 2 IP addresses and i need to bind the splunk web to 1 IP and the splunk daemon to the other IP address.

i configure the server.socket_host setting in web.conf.

the splunk web indeed has bind to the IP address

However, when i modify $SPLUNK_HOME/etc/splunk-launch.conf to include the SPLUNK_BINDIP attribute and value, the splunk web is no longer bound to the IP that i specified in web.conf but is now bound to the IP i specified in splunk-launch.conf

How do i ultimately get to bind the web and daemon to 2 different IP addresses?

Re: Bind separate IP for Web & Daemon

jrbeers717 — Thu, 01 Dec 2011 14:11:53 GMT

I'm having trouble with this as well and would love an answer.

Thanks!

Re: Bind separate IP for Web & Daemon

deyeo — Wed, 07 Dec 2011 04:01:34 GMT

This is the reply i've gotten from Splunk Support:

I believe we cannot have this kind of feature at the moment, I can help to file an enhancement request for that if the product team will provide this kind of feature. I think it is worth having of the ports binding to 2 difference of IP addresses. Thanks for your suggestion.

Re: Bind separate IP for Web & Daemon

mhorbul — Thu, 15 Jan 2015 17:56:49 GMT

Is there any solution for that ? I want to have 8089 be listened from 127.0.0.1 but 8000 - from particular external IP.

Re: Bind separate IP for Web & Daemon

ppeterson — Thu, 28 Jan 2016 14:03:38 GMT

I have an issue doing this, I needed to bind the web UI on port 8000 but leave the rest of splunk listening on 127.0.0.1. I was able to accomplish this however when I start splunk it still shows that it is trying to start on 127.0.0.1:8000. Is this just an annoyan ce I'll need to live with?

Waiting for web server at http://127.0.0.1:8000 to be available...........................................................................server.socket_host...................................................................................................................................................................................................^C

Re: Bind separate IP for Web & Daemon

ikulcsar — Thu, 19 Jan 2017 09:36:06 GMT

Dear deyeo,

Is there any update in this topic?

I have a similar problem: need to bind splunk-web to a specific IP, while need to receive logs on all ip.

Thanks,
István