Deployment Architecture

What servers does Splunk use?

msrkr
Explorer

I deployed Splunk in an AWS environment and want to know what servers Splunk uses?
like webserver, application server

0 Karma

woodcock
Esteemed Legend

Splunk runs a web-service on port 8000 which is a GUI front end to access it's REST API which does its work through the splunkd process running on the server.

0 Karma

lfedak_splunk
Splunk Employee
Splunk Employee

Hey @msrkr, if this answered your question don't forget to "Accept" the answer to award karma points 😄

0 Karma

s2_splunk
Splunk Employee
Splunk Employee

Splunk is a self-contained application. The core runs without a GUI and exposes a REST API to the world (accessible by default via port 8089). The Splunk UI uses this REST API. A built-in web server (CherryPy) is used to serve up the UI (by default via port 8000).
For a complete list of third-party software bundled with Splunk, see the documentation.

Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

[Puzzles] Solve, Learn, Repeat: Tiling

This puzzle (first published here) is based on finding groups of tessellated tiles (inspired by floor tiles I ...

SOK it to Me: Top 3 Benefits of Using Splunk Operator on Kubernetes that’ll Make ...

    Thursday, July 9, 2026  |  11:00AM–12:00PM PDT Duration: 1 hour (includes Q&A) Managing can feel like a ...

Upgrade Prep for 10.4, Network Observability Deep Dives, and More from Splunk Lantern

Splunk Lantern is Splunk’s customer success center that provides practical guidance from Splunk experts on key ...