I have an offline network consisting of thirteen machines, one of them being the Splunk server. I wish to use one of the other computers (one of the hosts on the same network) to get the web interface. Those that will be searching the logs via the web interface will not have access to the Splunk server -- so they won't able to simply use http://localhost:8000, obviously.
I'm assuming I'll need to make some sub-accounts maybe. I was just looking for some guidance. Thanks.
If you're looking to port just the Splunk web UI component to different server, then it's not possible. If your current server is restricted/behind firewall, then you could setup a F5 VIP so that users login using that VIP URL. You can then just allow connection from F5 to your restricted Splunk server.
So, I wouldn't be able to login to the Web interface using my own computer at my desk while it is on the same network as the other computer running Splunk Enterprise (acting as the Splunk server)? My computer has the Splunk Forwarder but not the actual Enterprise software.
The only way I know how to get to the web interface for Splunk is being on the Splunk server itself by typing 'http://localhost:8000' in the address bar.
My question: Is there another way I can get to the web interface by not being on the Splunk server? For example: Can I use one of the other computers on my network to get to the interface?