Why is port 8089 not available via the UI?

[danielbb]

We see the following on the server via the ss -tulpn 

tcp            LISTEN          0               128                               0.0.0.0:8089                         0.0.0.0:*             users:(("splunkd",pid=392724,fd=4))

 However, the browser at http://<Indexer>:8089 returns ERR_CONNECTION_RESET. What can it be? 
while http://<Indexer>:8000 works as expected.

[gcusello]

Hi @danielbb ,

as also @isoutamo and @kiran_panchavat said, 8089 is a management port that cannot be used via GUI, in addition, connections using 8089 are all in https, not http.

Ciao.

Giuseppe

[kiran_panchavat]

@danielbb Please have a look. 

[isoutamo]

Port 8089 is for splunk internal management communication between nodes. E.g. all traffic from search head to indexer peers goes to this port. Also you could use REST calls to manage, get information or even run saved searches on nodes.

Port 8000 is normally for GUI access. 
Here is one diagram of ports and how those are connected https://community.splunk.com/t5/Deployment-Architecture/Diagram-of-Splunk-Common-Network-Ports/m-p/1...

[danielbb]

Thank you for your insight.

I do see it via https://<indexer>:8089