Deployment Architecture

What servers does Splunk use?

msrkr
Explorer

I deployed Splunk in an AWS environment and want to know what servers Splunk uses?
like webserver, application server

0 Karma

woodcock
Esteemed Legend

Splunk runs a web-service on port 8000 which is a GUI front end to access it's REST API which does its work through the splunkd process running on the server.

0 Karma

lfedak_splunk
Splunk Employee
Splunk Employee

Hey @msrkr, if this answered your question don't forget to "Accept" the answer to award karma points 😄

0 Karma

s2_splunk
Splunk Employee
Splunk Employee

Splunk is a self-contained application. The core runs without a GUI and exposes a REST API to the world (accessible by default via port 8089). The Splunk UI uses this REST API. A built-in web server (CherryPy) is used to serve up the UI (by default via port 8000).
For a complete list of third-party software bundled with Splunk, see the documentation.

Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Announcing Modern Navigation: A New Era of Splunk User Experience

We are excited to introduce the Modern Navigation feature in the Splunk Platform, available to both cloud and ...

Modernize your Splunk Apps – Introducing Python 3.13 in Splunk

We are excited to announce that the upcoming releases of Splunk Enterprise 10.2.x and Splunk Cloud Platform ...

Step into “Hunt the Insider: An Splunk ES Premier Mystery” to catch a cybercriminal ...

After a whole week of being on call, you fell asleep on your keyboard, and you hit a sequence of buttons that ...