Installation

Consequences of not using default ports

jamie1
Communicator

Hi There,

I am currently trying to set up a universal forwarder on a CentOS 7 server. I have extracted the package and am attempting to start the service but receive the following: 

 

ERROR: mgmt port [8089] - port is already bound. Splunk needs to use this port.

 

The port is in fact in use and thus the only solution seems to be using a non-default port.

Will this cause any issues in the long run or is running Splunk on different ports completely supported? As I have only ever used the default ports for previous installations.

Any help/info would be appreciated,

Jamie

Labels (2)
0 Karma
1 Solution

tej57
Path Finder

Hey @jamie1,

It is completely okay to have Splunk services running on different ports other than the default ones. You just need to make sure that the appropriate configuration files are updated with the port that you change.

For eg: Default ingestion port is 9997. However, if you wish to change it to let's say 3434, then you need to make sure to update the inputs.conf and outputs.conf with the same value for the appropriate stanza.

 

Thanks,
Tejas.

 

----

If the above solution is helpful, an upvote is appreciated. 

View solution in original post

tej57
Path Finder

Hey @jamie1,

It is completely okay to have Splunk services running on different ports other than the default ones. You just need to make sure that the appropriate configuration files are updated with the port that you change.

For eg: Default ingestion port is 9997. However, if you wish to change it to let's say 3434, then you need to make sure to update the inputs.conf and outputs.conf with the same value for the appropriate stanza.

 

Thanks,
Tejas.

 

----

If the above solution is helpful, an upvote is appreciated. 

jamie1
Communicator

Hey,

Thanks for the info, it was just the management port that needed changing, I picked a different port, finished the installation and everything seems to be working as expected.

Thanks again for the information 🙂

Jamie

0 Karma
Get Updates on the Splunk Community!

.conf24 | Registration Open!

Hello, hello! I come bearing good news: Registration for .conf24 is now open!   conf is Splunk’s rad annual ...

ICYMI - Check out the latest releases of Splunk Edge Processor

Splunk is pleased to announce the latest enhancements to Splunk Edge Processor.  HEC Receiver authorization ...

Introducing the 2024 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...