topic Re: disable port 443 on indexer in Getting Data In

disable port 443 on indexer

smudge797 — Thu, 21 Aug 2014 15:40:41 GMT

Is it possible to disable port 443 on indexers? If so how? Is there a CL or is it through the UI?

Re: disable port 443 on indexer

Ayn — Thu, 21 Aug 2014 15:56:01 GMT

Hm? Splunk doesn't open port 443 at all unless you configured it to do so in some way. It may listen to ports 9997 (log receiving), 8089 (intra-Splunk-traffic) or 8000 (splunkweb) depending on how you configured it, but 443, no.

Re: disable port 443 on indexer

smudge797 — Thu, 21 Aug 2014 15:58:50 GMT

So we have a setting in our web.conf

httpport = 443

could this be causing it to be open?

Re: disable port 443 on indexer

Yasaswy — Thu, 21 Aug 2014 16:26:11 GMT

Yes. If you do not need splunkweb on the indexer... you can just omit this or set it to 0 or just disable splunkweb.
"splunk disable webserver" and restart.