topic Re: Cannot get to Splunk Web interface in Installation

Cannot get to Splunk Web interface

DNT — Thu, 10 Jun 2010 16:48:18 GMT

Hi there

I have installed Splunk on Solaris 10 Sparc machine. On that machine Orca is also running. After installation it gives me the address for my browser but when I paste that in my browser then it is not opening the interface. Is there perhaps a conflict with Apache running on that machine? I've even tried changing the ports but to no avail.

Thanks in advance

Dean

Re: Cannot get to Splunk Web interface

chris — Thu, 10 Jun 2010 17:51:12 GMT

Maybe this will help you:

What is the output of the following command:

$SPLUNK_HOME/bin/splunk status

It should be something like this:

splunkd is running (PID: 9630).
splunk helpers are running (PIDs: 9631).
splunkweb is running (PID: 9776).

Check the httpport setting in the web.conf file here $SPLUNK_HOME/etc/system/local/

Make sure that something is listening on that port with netstat -an

Check the log file in $SPLUNK_HOME/var/log/splunk/splunkd.log to see if there are any errors

Re: Cannot get to Splunk Web interface

DNT — Sun, 13 Jun 2010 04:03:44 GMT

root@host:/splunk/splunk/bin# ./splunk status
splunkd is running (PID: 27525).
splunk helpers are running (PIDs: 27526).
splunkweb is running (PID: 27537).

cat /splunk/splunk/etc/system/local/web.conf
[default]

[settings]
httpport = 8001

The netstat command shows that it is listening on the port 8001. I even changed the port and it had no effect.

I checked the logs and it is mostly just info events. I don't think I'm being blocked on a firewall either because I am able to telnet to the server using the port specified.

Re: Cannot get to Splunk Web interface

DNT — Mon, 14 Jun 2010 13:50:50 GMT

Correction on my previous comment. The port seems to be blocked. It should work once we allow access.

Re: Cannot get to Splunk Web interface

chris — Mon, 14 Jun 2010 17:17:27 GMT

Ok, hope this will work:)

Re: Cannot get to Splunk Web interface

balbano — Fri, 25 Jun 2010 04:42:21 GMT

Yea if the service is running and you cannot telnet to your splunk instance host on port 8000 from your local PC most likely its a Firewall ACL issue.

Brian

Re: Cannot get to Splunk Web interface

williamche — Fri, 15 Oct 2010 20:19:21 GMT

Hope your Splunk is accessible now after changing your firewall's ACL. If not then check if the hostname in the URL that Splunk gave is resolvable. If not then you'll have to use the server's fully qualified domain name.

Re: Cannot get to Splunk Web interface

jalfrey — Tue, 11 Jun 2013 23:32:46 GMT

by default CentOS 6.4 has IPTables enabled. This blocks port 8000 access. To turn it off do the following:

/etc/init.d/iptables save
/etc/init.d/iptables stop

to prevent it from coming back on next boot

chkconfig iptables off

Re: Cannot get to Splunk Web interface

neelamssantosh — Sat, 19 Sep 2015 08:11:15 GMT

Hope it can help you,

check the port and hostname are right, sometime hostname may not be resolved so use the IP address
./splunk show web-port
check startwebserver =1
./splunk cmd btool web list --debug |grep startwebserver
Run these commands to open the iptables/ports in Unix machines
sudo firewall-cmd --zone=public --add-port=8000/tcp --permanent
sudo firewall-cmd --reload

Hope by now u will be able to access the Webserver.
Happy splunking 🙂

Re: Cannot get to Splunk Web interface

rbenlizar — Tue, 15 Nov 2016 16:50:32 GMT

This was the simple solution that I spent 2 hrs looking for, lol. Thank you

Re: Cannot get to Splunk Web interface

Sahithi0394 — Wed, 21 Mar 2018 19:51:06 GMT

doesn't make any change in my server.

Re: Cannot get to Splunk Web interface

pratibha2018 — Tue, 27 Mar 2018 13:00:53 GMT

What if startwebserver =0 ?
What should I need to do as splunk Daemon is running?

Re: Cannot get to Splunk Web interface

khushsingh — Sat, 14 Sep 2019 11:25:01 GMT

This is bizarre, I didn't have to do this in any other instant of Splunk, they all worked,

So wasn't sure this was the right answer. then carried on troubleshooting.
2 days later...thought lets open this port ..and Volla !

Thanks...

Re: Cannot get to Splunk Web interface

mwhitener — Thu, 14 Nov 2019 02:23:21 GMT

Oh wow - 8 hours gone and then find this answer and it is all clear now. Thank you so much!

Re: Cannot get to Splunk Web interface

jony360 — Tue, 04 Feb 2020 14:59:27 GMT

I also facing same issue when i am trying to login Splunk GUI via my user name and password its throwing error "Login Fail" and for other users which are another domain they are able to login successfully only user belong to my AD domain having some issue, I have tried restarting Linux Splunk services check AD bind configuration file but not able to fix the issue. Any idea what goes wrong?
Thanks

Re: Cannot get to Splunk Web interface

richgalloway — Tue, 04 Feb 2020 15:48:37 GMT

Dude! You're piling on to a thread that's 10 years old! Please post a new question.

Re: Cannot get to Splunk Web interface

Herman — Thu, 18 Mar 2021 13:53:19 GMT

What are the commands for the firewall permission on MacOS? Thanks

Re: Cannot get to Splunk Web interface

Ghookas — Thu, 23 May 2024 09:44:33 GMT

I checked fire wall setting and it works for me

Thank you