topic Re: Splunk is not working. localhost refused to connect. in Splunk Search

Splunk is not working. localhost refused to connect.

clgzcom — Tue, 29 Sep 2020 20:49:25 GMT

This site can’t be reached
localhost refused to connect.
Did you mean http://localhost8000.com/?
Search Google for localhost 8000
ERR_CONNECTION_REFUSED

--
OS: Windows Server 2016

Re: Splunk is not working. localhost refused to connect.

renjith_nair — Thu, 09 Aug 2018 00:28:35 GMT

Is it a local system installation ?
Do you have ssl enabled for web ? then try https
Is firewall enabled which blocks 8000 ?

Re: Splunk is not working. localhost refused to connect.

clgzcom — Thu, 09 Aug 2018 01:36:19 GMT

Yes it is local system installation.
Yes, I tried but it doesn't work.

I also checked if there are connections with the port 800 by running netstat -an | select-string 8000 and there aren't

Re: Splunk is not working. localhost refused to connect.

clgzcom — Thu, 09 Aug 2018 01:36:51 GMT

I did checked with the windows firewall turned off.

Re: Splunk is not working. localhost refused to connect.

renjith_nair — Thu, 09 Aug 2018 01:45:37 GMT

If the netstat is not showing 8000, then splunk is also not listening to that. Is Splunk running and have you changed the port ?

Re: Splunk is not working. localhost refused to connect.

clgzcom — Thu, 09 Aug 2018 01:47:13 GMT

No, everything is default

Re: Splunk is not working. localhost refused to connect.

renjith_nair — Thu, 09 Aug 2018 01:51:06 GMT

Ok can you restart and what's the last message in the console about splunkweb start? Also look at the splunkd.log to see if there are any errors reported

Re: Splunk is not working. localhost refused to connect.

clgzcom — Thu, 09 Aug 2018 02:24:41 GMT

I checked the splunkd.log snd there is no reference to "splunkweb start"

Re: Splunk is not working. localhost refused to connect.

renjith_nair — Thu, 09 Aug 2018 02:35:06 GMT

Still feels that the port is not listening or blocked. Restart splunk from the command line, recheck the port the web is connecting to - 8000,8001,8002. Also check the web_service log

Re: Splunk is not working. localhost refused to connect.

MikeBertelsen — Thu, 07 Feb 2019 17:14:17 GMT

I assume by now you figured out that the webserver is not enabled.
If it is still an issue do the following:
cd c:\program files\splunk\bin
splunk stop
splunk enable webserver
splunk start

When Splunk starts up you will see that there are two ports being opened instead of one; the mgmt port 8089 and the http port 8000

Re: Splunk is not working. localhost refused to connect.

akothapa — Sun, 19 Apr 2020 17:06:54 GMT

perfect answer. Thanks a lot!!!!

Re: Splunk is not working. localhost refused to connect.

Sndiman — Thu, 11 Jun 2020 16:22:15 GMT

If I'm told 'access is denied' what then ?

Re: Splunk is not working. localhost refused to connect.

bharath_Splunk — Fri, 26 Jun 2020 18:21:35 GMT

Follow These steps:

Open cmd as Administrator

C:\Windows\system32> cd
C:\Windows\system32> cd C:\Program Files\Splunk\bin

C:\Program Files\Splunk\bin>splunk start

Splunk> Be an IT superhero. Go home early.

Checking prerequisites...
Checking http port [8000]: open
Checking mgmt port [8089]: open
Checking appserver port [127.0.0.1:8065]: open
Checking kvstore port [8191]: open
Checking configuration... Done.
Checking critical directories... Done
Checking indexes...
(skipping validation of index paths because not running as LocalSystem)
Validated: _audit _internal _introspection _metrics _metrics_rollup _telemetry _thefishbucket history main summary
Done
Checking filesystem compatibility... Done
Checking conf files for problems...
Done
Checking default conf files for edits...
Validating installed files against hashes from 'C:\Program Files\Splunk\splunk-8.0.4.1-ab7a85abaa98-windows-64-manifest'
All installed files intact.
Done
All preliminary checks passed.

Starting splunk server daemon (splunkd)...

Splunkd: Starting (pid 1116)
Done

Waiting for web server at http://******:8000 to be available... Done

If you get stuck, we're here to help.
Look for answers here: http://docs.splunk.com

The Splunk web interface is at http://*******:8000

now open browser and now it will work