Deployment Architecture

Unable to connect to remote splunk server

cloudharmony
Explorer

I'm trying to run the splunk CLI client using a remote server uri. The remote server is live and listening on port 8089, and the client has access to port 8089 on the server (verified using telnet). However, when I tried to run the splunk client using the -uri http://[my splunk server]:8089 option it immediately returns with the error message "Splunk is not running, and it must be for this operation. To start splunk, run "splunk start"". I've also tried adding allowRemoteLogin = always to server.conf without success.

Tags (2)
0 Karma
1 Solution

Ayn
Legend

You forgot the s in the https uri (splunkd only accepts SSL connections).

-uri https://[your splunk server]:8089

View solution in original post

Ayn
Legend

You forgot the s in the https uri (splunkd only accepts SSL connections).

-uri https://[your splunk server]:8089

Ayn
Legend

Great! Could you please mark the answer as accepted? Thanks!

0 Karma

cloudharmony
Explorer

Thanks, that did the trick. I figured it was something simple.

0 Karma
Get Updates on the Splunk Community!

Tech Talk Recap | Mastering Threat Hunting

Mastering Threat HuntingDive into the world of threat hunting, exploring the key differences between ...

Observability for AI Applications: Troubleshooting Latency

If you’re working with proprietary company data, you’re probably going to have a locally hosted LLM or many ...

Splunk AI Assistant for SPL vs. ChatGPT: Which One is Better?

In the age of AI, every tool promises to make our lives easier. From summarizing content to writing code, ...