Splunk Dev

Unable to access Rest API over http in splunk 7.1

kvswathi
Path Finder

Hi ,

I am using the splunk latest version 7.1 . Not able to access the splunk rest API using http even after changing the
enableSplunkdSSL = false in server.conf.

It was working well with previous version of splunk. Any idea about the issue ?

-Swathi kv

Tags (1)
0 Karma
1 Solution

xpac
SplunkTrust
SplunkTrust

Yeah, that's the default response when you try to speak HTTP to an HTTPS port, therefore it seems to not have worked.

Did you try splunk btool server list sslConfig to see if your config actually works out, or splunk show config server to check the running config of that instance?

If all of this is true and fine, I'd report it to support as a bug.

Besides all of that: You know disabling SSL is considered against best practice and insecure, as you send all your Splunk internal communication over that port, and therefore disabling encryption is not recommended?

View solution in original post

0 Karma

xpac
SplunkTrust
SplunkTrust

Yeah, that's the default response when you try to speak HTTP to an HTTPS port, therefore it seems to not have worked.

Did you try splunk btool server list sslConfig to see if your config actually works out, or splunk show config server to check the running config of that instance?

If all of this is true and fine, I'd report it to support as a bug.

Besides all of that: You know disabling SSL is considered against best practice and insecure, as you send all your Splunk internal communication over that port, and therefore disabling encryption is not recommended?

0 Karma

kvswathi
Path Finder

That was my mistake . I had missed to mention the stanza
[sslConfig] before enableSplunkdSSL = false. Thank you so much for your help.

0 Karma

kvswathi
Path Finder

Thanks for your reply.

The url I am trying to access is http://10.X.X.X:8089

The same is working fine with https://10.X.X.X:8089 . But I need it to work on http.

The response I am getting is

This page isn’t working
10.X.X.X didn’t send any data.
ERR_EMPTY_RESPONSE

-Swathi

0 Karma

xpac
SplunkTrust
SplunkTrust

Can you elaborate on "not able to access"? Do you get a timeout? A connection reset? A HTTP error?
Can you also show the actual URL you're trying to access?

0 Karma

kvswathi
Path Finder

Thanks for your reply.

The url I am trying to access is http://10.X.X.X:8089

The same is working fine with https://10.X.X.X:8089 . But I need it to work on http.

The response I am getting is

This page isn’t working
10.X.X.X didn’t send any data.
ERR_EMPTY_RESPONSE

-Swathi

0 Karma
Get Updates on the Splunk Community!

Introducing Splunk Enterprise 9.2

WATCH HERE! Watch this Tech Talk to learn about the latest features and enhancements shipped in the new Splunk ...

Adoption of RUM and APM at Splunk

    Unleash the power of Splunk Observability   Watch Now In this can't miss Tech Talk! The Splunk Growth ...

Routing logs with Splunk OTel Collector for Kubernetes

The Splunk Distribution of the OpenTelemetry (OTel) Collector is a product that provides a way to ingest ...