Deployment Architecture

splunk web interface is not working on live server .

New Member

I have installed splunk in local ubuntu and working fine. i got web interface and server started on port 8000. Now i want to install splunk on my live production server. i have installed rpm package successfuly and also started daemon on port 8000. but i cant able to access web interface on internet. is port 8000 not accessible from public ?

Tags (3)
0 Karma


There are many things that you can check, but the most common would be firewall issues, this can both be network firewalls or local firewalls (e.g. iptables). You should start by looking at this root to check there is connectivity being allowed.

Also, is it possible to log-on to the WebUI from the server (i.e. locally) to check the service/daemon is working correctly?



0 Karma

Splunk Employee
Splunk Employee
  • verify that the port is open locally
    use : netstat -an | grep 8000

  • test that you are not using ssl for splunkweb :
    with https://myserver:8000

  • Check that your server doesn't have a firewall service
    (classic one is iptables)

  • Ask your network administrator/security admin if the port 8000 is not blocked to external users by a firewall/router.

Get Updates on the Splunk Community!

Streamline Data Ingestion With Deployment Server Essentials

REGISTER NOW!Every day the list of sources Admins are responsible for gets bigger and bigger, often making the ...

Remediate Threats Faster and Simplify Investigations With Splunk Enterprise Security ...

REGISTER NOW!Join us for a Tech Talk around our latest release of Splunk Enterprise Security 7.2! We’ll walk ...

Introduction to Splunk AI

WATCH NOWHow are you using AI in Splunk? Whether you see AI as a threat or opportunity, AI is here to stay. ...