topic Splunk search head docker behind nginx reverse proxy - how to deactivate test basic http on startup? in Getting Data In

Splunk search head docker behind nginx reverse proxy - how to deactivate test basic http on startup?

wfskmoney — Wed, 10 Nov 2021 22:32:55 GMT

my container starts behind nginx (web ssl deactivated), but then fails and restarts every minute:

FAILED - RETRYING: Test basic https endpoint (60 retries left).

since my nginx routes www.mysplunkserver.com:443/80 to container, :8000 is not routed for now.

Is there a way to deactivate basic https endpoint test?

[settings]

enableSplunkWebSSL = 0

httpport = 8000

tools.proxy.on = true

Re: Splunk search head docker behind nginx reverse proxy - how to deactivate test basic http on startup?

wfskmoney — Sat, 13 Nov 2021 12:13:39 GMT

The solution was that I changed the admin password inside Splunk, which was different from the SPLUNK_PASSWORD environment in the docker-compose file. This needs to be in sync:

environment:

- SPLUNK_START_ARGS=--accept-license

- SPLUNK_PASSWORD=MustBeTheSameAsManuallyChangedAdminPassword