Deployment Architecture

Unable to connect to remote splunk server

cloudharmony
Explorer

I'm trying to run the splunk CLI client using a remote server uri. The remote server is live and listening on port 8089, and the client has access to port 8089 on the server (verified using telnet). However, when I tried to run the splunk client using the -uri http://[my splunk server]:8089 option it immediately returns with the error message "Splunk is not running, and it must be for this operation. To start splunk, run "splunk start"". I've also tried adding allowRemoteLogin = always to server.conf without success.

Tags (2)
0 Karma
1 Solution

Ayn
Legend

You forgot the s in the https uri (splunkd only accepts SSL connections).

-uri https://[your splunk server]:8089

View solution in original post

Ayn
Legend

You forgot the s in the https uri (splunkd only accepts SSL connections).

-uri https://[your splunk server]:8089

Ayn
Legend

Great! Could you please mark the answer as accepted? Thanks!

0 Karma

cloudharmony
Explorer

Thanks, that did the trick. I figured it was something simple.

0 Karma
Get Updates on the Splunk Community!

Enterprise Security Content Update (ESCU) | New Releases

In December, the Splunk Threat Research Team had 1 release of new security content via the Enterprise Security ...

Why am I not seeing the finding in Splunk Enterprise Security Analyst Queue?

(This is the first of a series of 2 blogs). Splunk Enterprise Security is a fantastic tool that offers robust ...

Index This | What are the 12 Days of Splunk-mas?

December 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...