Getting Data In

How to configure my indexer to listen on port 8191?

wliu_ondeck
Explorer

During a review, I found out that one of our indexers is not listening on port tcp/8191.

From my reading, I found out that tcp/8191 is for the kvstore.

What troubleshooting steps would I need to take so that this indexer begins to listen on tcp/8191?

0 Karma

lguinn2
Legend

Go to the command line and change to the $SPLUNK_HOME/bin directory.
Use splunk show kvstore-port to see what port has been assigned to the KVstore.
Use splunk set kvstore-port 8191 to set the port to 8191, then restart Splunk.

After Splunk has been restarted, it should be fine. You can use the show command above to check on it.

0 Karma
Get Updates on the Splunk Community!

Splunk Enterprise Security 8.x: The Essential Upgrade for Threat Detection, ...

 Prepare to elevate your security operations with the powerful upgrade to Splunk Enterprise Security 8.x! This ...

Get Early Access to AI Playbook Authoring: Apply for the Alpha Private Preview ...

Passionate about security automation? Apply now to our AI Playbook Authoring Alpha private preview ...

Reduce and Transform Your Firewall Data with Splunk Data Management

Managing high-volume firewall data has always been a challenge. Noisy events and verbose traffic logs often ...