Deployment Architecture

Bind splunk webserver to a particular URL address (of an Amazon EC2 instance).

boris
Path Finder

After I installed Splunk on a (64 AMD debian) Amazon EC2 instance I see this message:

The Splunk web interface is at http://ip-10-12-117-100:8000

The problem is that this IP above 10-12-117-100 is listed by Amazon as the internal or private IP address, so the web service can't be accessed with this IP.

I need Splunk to bind to this public address:

ec2-5X-XX-XXX-XX.compute-1.amazonaws.com

My guess is that there is a configuration file that I need to edit and then I need to restart Splunk?

Tags (3)
1 Solution

csharp_splunk
Splunk Employee
Splunk Employee

Amazon EC2 does not give you a public address on your instance. Instead, it does destination NAT on the public IP to the private IP when the source attempts to access it. It's transparent to your application. If you attempt to use Splunk on port 8000 from the public IP that EC2 has given you, it will work, assuming you've setup the firewall rules properly.

View solution in original post

csharp_splunk
Splunk Employee
Splunk Employee

Amazon EC2 does not give you a public address on your instance. Instead, it does destination NAT on the public IP to the private IP when the source attempts to access it. It's transparent to your application. If you attempt to use Splunk on port 8000 from the public IP that EC2 has given you, it will work, assuming you've setup the firewall rules properly.

ftk
Motivator

Correct. I would recommend to force HTTPS for splunkweb as well. To get a friendly URL I recommend setting up DynDNS or similar service.

0 Karma
Get Updates on the Splunk Community!

Index This | I am a number, but when you add ‘G’ to me, I go away. What number am I?

March 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...

What’s New in Splunk App for PCI Compliance 5.3.1?

The Splunk App for PCI Compliance allows customers to extend the power of their existing Splunk solution with ...

Extending Observability Content to Splunk Cloud

Register to join us !   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to ...