What is the mgmtHostPort configured on the forwarder

[robertlynch2020]

Hi

I have a situation where i had to change the mgmtHostPort on my forwarder from 8089 to 9089 as it would not start as it said address already in use. When SPLUNK starts is does uses this port for the mgmtHostPort.

The forwarder works as it write data to the index on 9997.

The question is what is mgmtHostPort used for on the forwarder?

https://answers.splunk.com/answers/118859/diagram-of-splunk-common-network-ports.html

[woodcock]

It allows you (or software) to administer it through a web interface. It is a common security best practice to disable it entirely on forwarders in server.conf like this:

 [httpServer]
 # Disable management port to prevent remote (or local) config.
 disableDefaultPort = true

[TStrauch]

Hi,

hope this helps.

https://answers.splunk.com/answers/115242/can-someone-please-explain-to-me-why-splunk-universal-forw...

regards