How to define the listening port on a specific interface for universal forwarder deployment

[phaelf]

At the moment the universal forwarder client is listening locally for deployment on port 8089, but on all interfaces present on the server, how can I limit it to a specifc interface. I've checked all settings for the deploymentclient.conf but there seems to be no setting for this.

[gkanapathy · Accepted solution]

You can set it using SPLUNK_BINDIP:

http://docs.splunk.com/Documentation/Splunk/4.2.4/Admin/BindSplunktoanIP