topic accessing splunk installed on a server in Installation

accessing splunk installed on a server

test4u — Fri, 22 Feb 2019 04:22:25 GMT

I have splunk enterprise version installed on a windows server.How to use that server from various windows client without having splunk installed in them .?

Re: accessing splunk installed on a server

vik_splunk — Fri, 22 Feb 2019 15:16:08 GMT

Very little information is provided to be honest. However, if your question is how you would access the web URL,

Assuming both machines are on the same network and that you have not modified the web port, http://"hostname or alias":8000/

Re: accessing splunk installed on a server

test4u — Mon, 25 Feb 2019 02:48:46 GMT

yes all the machines are in same network and i need to access the splunk url i.e. "http://localhost:8000/en-US/account/login?return_to=%2Fen-US%2F" from a machine where splunk is not installed. how can we do it.?

Re: accessing splunk installed on a server

anaidu_splunk — Mon, 25 Feb 2019 04:37:16 GMT

Check the connection between both the Windows servers via ping protocol. If both can communicate you should access the splunk URL. Use this URL from the remote machine to access "http://hostname of splunk server OR splunk server IP address:8000".
For example:

If Splunk is installed in the server with a name --> test --> ipaddress: 10.10.10.10

access the GUI from the same server as --> http://test:8000 OR http://localhost:8000

access the GUI from the different server as --> http://test:8000 OR http://10.10.10.10:8000

"http://localhost:8000" won't be working as you're trying to access from the different server. Localhost is used if you are trying to access the splunk GUI in the same server where splunk is used

Re: accessing splunk installed on a server

test4u — Wed, 27 Feb 2019 01:52:52 GMT

hi what if i have a virtual machine in which i have installed splunk and want to access it from the host machine ?? the above things are not working in it. Can you help me out with it?

Re: accessing splunk installed on a server

anaidu_splunk — Wed, 27 Feb 2019 04:21:09 GMT

Hi,

Are you using Splunk Universal forwarder or Splunk Enterprise?

If UF --> then there is no web GUI. The Splunk web is available only for Enterprise versions.

It's the same whatever the machine you are using(VM/cloud/remote). Only thing is to check the communication from your localhost to VM.

If you haven't change the port number, then the below should work. If you change, then use that port number.
Check the web status and port number. splunk show web-port and splunk status splunkweb.

access the Splunk Web GUI from the same server as --> http://test:8000 OR http://localhost:8000

access the Splunk Web GUI from the different/remote/VM server as --> http://test:8000 OR http://10.10.10.10:8000

Re: accessing splunk installed on a server

ashajambagi — Thu, 28 Feb 2019 11:32:29 GMT

Try opening port 8000 on the server where splunk is installed