splunk web interface is not working on live server .

[Piyush_Aghera]

I have installed splunk in local ubuntu and working fine. i got web interface and server started on port 8000. Now i want to install splunk on my live production server. i have installed rpm package successfuly and also started daemon on port 8000. but i cant able to access web interface on internet. is port 8000 not accessible from public ?

[MHibbin]

There are many things that you can check, but the most common would be firewall issues, this can both be network firewalls or local firewalls (e.g. iptables). You should start by looking at this root to check there is connectivity being allowed.

Also, is it possible to log-on to the WebUI from the server (i.e. locally) to check the service/daemon is working correctly?

Regs,

MHibbin

[yannK]

• verify that the port is open locally
  use : netstat -an | grep 8000

• test that you are not using ssl for splunkweb :
  with https://myserver:8000

• Check that your server doesn't have a firewall service
  (classic one is iptables)

• Ask your network administrator/security admin if the port 8000 is not blocked to external users by a firewall/router.