Splunk Mobile Access Server - Server can not connect to Splunk Enterprise

[rkelch]

I am struggling to get the Splunk Mobile Access Server working. I can get through the initial configuration without issue. After the last restart, I click on Administrator Login and enter my admin credentials for Splunk Enterprise. This results in the error "Server can not connect to Splunk Enterprise".

This failure generates the following log:

2014-07-24T15:04:02.926-05:00 - error: category=internal_server_error, error=Error, message=Server can not connect to Splunk Enterprise., stack=Error: Server can not connect to Splunk Enterprise.

at Object.module.exports as throw
at Object.consoleLogin (/opt/mserver/server/app/controllers/console_auth_controller.js:8:17)
at GeneratorFunctionPrototype.throw (native)
at Object.next (/opt/mserver/server/node_modules/co/index.js:74:26)
at Object. (/opt/mserver/server/node_modules/co/index.js:102:18)
at processImmediate as _immediateCallback, worker=3

I have been following the documentation at http://docs.splunk.com/Documentation/MobileServer/1.0/Install/InstalltheSplunkMobileAccessServer with success through the install (using all defaults).

• Both MAS and SE systems are CentOS 6.5
• I can telnet to 8000 and 8089 from the MAS to the Search Head
• Disabling iptables on either or both servers doesn't fix the issue

I am desperately there is another early adopter here that can help me out and get this connection working.

[jzhong_splunk · Accepted solution]

Hi there,

I assume your mobile access server is not installed on the Splunk Search Head. If you accept all default values during installation, the mobile access server will connect to splunk enterprise via localhost.

Could you please double check /mserver/server/config/config_local.json? Around line 45, there are the fields for splunkd and splunkweb. You need change the host to actual Search Head host. Hope it helps.

  "servers": {
    "m": {
      "splunkd": {
        "scheme": "https",
        "host": "localhost",
        "port": 8089,
        "version": "6.0"
      },
      "splunkweb": {
        "scheme": "http",
        "host": "localhost",
        "port": 8000,
        "path": "/en-US/static"
      }
    }
  },

[rkelch]

This is exactly what I needed. Thank you so much!