Can't view Web Interface " ERR_CONNECTION_REFUSED"

[tinpelayee]

Hello everybody,

I have just installed Splunk, all ports are ok, firewalld is down. But i cant acced to the interface web, y use localhost:8000 and there is not any answer. I reinstalled it 3 times, and its running perfectly.

Can anyone help me?

Thanks!!

[woodcock]

Did you try both http:// and https://?

[gcusello]

Hi @tinpelayee,
which Splunk version are you using? and on which Operative System?
if you run $SPLUNK_HOME/bin/splunk status what's the result?

Ciao.
Giuseppe

[tinpelayee]

hello @gcusello, this is the message that i recibe

[root@splunkhl04 bin]# ./splunk status
splunkd is running (PID: 32013).
splunk helpers are running (PIDs: 32064 32077 32202 32257 37005 37031).
[root@splunkhl04 bin]#

[gcusello]

Hi @tinpelayee,
Ok this means that Splunk is up and running.
Now, what's the result trying with telnet splunk_ip 8000 ?

Ciao.
Giuseppe

[tinpelayee]

what is the command telnet splunk ip : port?

[gcusello]

telnet ip port
as I said telnet splunk_ip 8000

Ciao.
Giuseppe

[tinpelayee]

This message y recibe .

[root@splunkhl04 ~]# telnet splunk_ip 8000
telnet: splunk_ip: Name or service not known

[gcusello]

splunk_ip is the ip address of your splunk server
telnet is useful to understand if ports are open or closed.
Did you checked iptables?

Ciao.
Giuseppe

[tinpelayee]

perfecto, no i dont checked iptables.

How can i know the ip adress of splunk ? i am working in a office and the ip of this pc is not the ip of the server.

[tinpelayee]

i have this message

[root@splunkhl04 ~]# telnet splunkhl04 8000
Trying 10.164.23.110...
Connected to splunkhl04.
Escape character is '^]'.

and never send other answer

[gfreitas]

This means it is connected. Now try on your browser: http://splunkhl04:8000

[tinpelayee]

ok , i tried but the same answer ERR_TIMED_OUT 😕

[gfreitas]

Where are you trying to access that? From your computer? You seem to have a Linux server with Splunk installed. How do you access this server? SSH? Probably a bit easier if you install on your local computer xD

[tinpelayee]

yes, but i am doing this job for a client.
i read all the post that are related of this problem , but cant find this problem

[tinpelayee]

thanks for your help gfreitas and gcusello. if i can solve this problem i will post here

[gfreitas]

It seems you're not reaching the server. Use the address that you're accessing. I recommend you get someone to help you with the connectivity, use tcpdump to see if the traffic is reaching the server etc

[gfreitas]

Seems hostname of your Splunk server is: splunkhl04. You can try telnet splunkhl04 8000
You can know the IP of the server running ifconfig