Installation

Installing Splunk, and Web Interface is pointing to local host address 127.0.0.1 (after installation)

jmartelon
New Member

Hello,

I have installed splunk on my CentOS7 box in the default folder /opt/splunk.

After running the command sudo /opt/splunk/bin/splunk start --accept-license it shows the web interface is set to http://127.0.0.1:8000

How do I change this to set this to this boxes eth0 IP Address?

0 Karma

nickhills
Ultra Champion

The message Splunk reports on startup is a bit misleading.

Splunk will actually be listening on 0.0.0.0, which means it will respond on any network interface your host has.
The startup message is merely confirming that even if you have no network accessible nic, you could still access it on the loopback interface.

If my comment helps, please give it a thumbs up!
0 Karma

harsmarvania57
Ultra Champion

Hi,

Can you please check output of netstat -ntpul | grep 8000, is it showing 127.0.0.1:8000 or something else?

0 Karma

jmartelon
New Member

Here is my output

netstat -ntpul | grep 8000
tcp 0 0 0.0.0.0:8000 0.0.0.0:* LISTEN 21621/splunkd

0 Karma

harsmarvania57
Ultra Champion

This means splunk is running perfectly fine and will accept traffic from all IP address. As mentioned by @nickhillscpl, message displayed while starting splunk is misleading. You can access splunk from any machine using URL http://<IP Address/Hostname>:8000

0 Karma
Get Updates on the Splunk Community!

Dashboards: Hiding charts while search is being executed and other uses for tokens

There are a couple of features of SimpleXML / Classic dashboards that can be used to enhance the user ...

Splunk Observability Cloud's AI Assistant in Action Series: Explaining Metrics and ...

This is the fourth post in the Splunk Observability Cloud’s AI Assistant in Action series that digs into how ...

Brains, Bytes, and Boston: Learn from the Best at .conf25

When you think of Boston, you might picture colonial charm, world-class universities, or even the crack of a ...