topic Re: Installing Splunk, and Web Interface is pointing to local host address 127.0.0.1 (after installation) in Installation

Installing Splunk, and Web Interface is pointing to local host address 127.0.0.1 (after installation)

jmartelon — Mon, 15 Jun 2020 22:49:36 GMT

Hello,

I have installed splunk on my CentOS7 box in the default folder /opt/splunk.

After running the command sudo /opt/splunk/bin/splunk start --accept-license it shows the web interface is set to http://127.0.0.1:8000

How do I change this to set this to this boxes eth0 IP Address?

Re: Installing Splunk, and Web Interface is pointing to local host address 127.0.0.1 (after installation)

harsmarvania57 — Thu, 28 Dec 2017 14:08:44 GMT

Hi,

Can you please check output of netstat -ntpul | grep 8000, is it showing 127.0.0.1:8000 or something else?

Re: Installing Splunk, and Web Interface is pointing to local host address 127.0.0.1 (after installation)

jmartelon — Thu, 28 Dec 2017 20:12:15 GMT

Here is my output

netstat -ntpul | grep 8000
tcp 0 0 0.0.0.0:8000 0.0.0.0:* LISTEN 21621/splunkd

Re: Installing Splunk, and Web Interface is pointing to local host address 127.0.0.1 (after installation)

nickhills — Thu, 28 Dec 2017 20:18:33 GMT

The message Splunk reports on startup is a bit misleading.

Splunk will actually be listening on 0.0.0.0, which means it will respond on any network interface your host has.
The startup message is merely confirming that even if you have no network accessible nic, you could still access it on the loopback interface.

Re: Installing Splunk, and Web Interface is pointing to local host address 127.0.0.1 (after installation)

harsmarvania57 — Fri, 29 Dec 2017 02:52:27 GMT

This means splunk is running perfectly fine and will accept traffic from all IP address. As mentioned by @nickhillscpl, message displayed while starting splunk is misleading. You can access splunk from any machine using URL http://<IP Address/Hostname>:8000