Running splunk web on two ports simultaneously

[anoopambli]

Is there anyway we can run splunk web on two different ports on a server? as an example we have splunk running on a server at 8000 port and web is accessible at http://:8000. One of my customer says the splunk page was also accessible in 3000 port earlier.

How do we do that? what is the configuration for it?

[bmacias84]

Ok, Splunk doesn't let you bind multiple port for the webserver (Not that I know of). You have a few options, use some solution proxy, Load Balancer, or iptables to forward the request. While there are probably more options I go with iptables. Here is a example using iptables.

#Linux

iptables -A PREROUTING -t nat -i eth0 -p tcp --dport 3000 -j REDIRECT --to-port 8000

Additional Reading:

• configure-splunk-instance-with-2-ip-addresses

Hope this help or gets you started. Dont forget to vote up and accept answers that help.

Cheers,

[anoopambli]

nix installation.

[bmacias84]

Yes, it is possible. Are you running nix or win installation?