Getting Data In

Splunk search head docker behind nginx reverse proxy - how to deactivate test basic http on startup?

wfskmoney
Path Finder

my container starts behind nginx (web ssl deactivated), but then fails and restarts every minute:

FAILED - RETRYING: Test basic https endpoint (60 retries left).

since my nginx routes www.mysplunkserver.com:443/80 to container, :8000 is not routed for now.

Is there a way to  deactivate basic https endpoint test?

[settings]
enableSplunkWebSSL = 0
httpport = 8000
tools.proxy.on = true
Tags (1)
0 Karma
1 Solution

wfskmoney
Path Finder

The solution was that I changed the admin password inside Splunk, which was different from the SPLUNK_PASSWORD environment in the docker-compose file. This needs to be in sync:

    environment:
      - SPLUNK_START_ARGS=--accept-license
      - SPLUNK_PASSWORD=MustBeTheSameAsManuallyChangedAdminPassword

View solution in original post

0 Karma

wfskmoney
Path Finder

The solution was that I changed the admin password inside Splunk, which was different from the SPLUNK_PASSWORD environment in the docker-compose file. This needs to be in sync:

    environment:
      - SPLUNK_START_ARGS=--accept-license
      - SPLUNK_PASSWORD=MustBeTheSameAsManuallyChangedAdminPassword
0 Karma
Get Updates on the Splunk Community!

Index This | What is broken 80% of the time by February?

December 2025 Edition   Hayyy Splunk Education Enthusiasts and the Eternally Curious!    We’re back with this ...

Unlock Faster Time-to-Value on Edge and Ingest Processor with New SPL2 Pipeline ...

Hello Splunk Community,   We're thrilled to share an exciting update that will help you manage your data more ...

Splunk MCP & Agentic AI: Machine Data Without Limits

Discover how the Splunk Model Context Protocol (MCP) Server can revolutionize the way your organization uses ...