Installation

Unable to access web UI

fromero
Splunk Employee
Splunk Employee

Hi all, I am new to splunk

When I start splunk, it does not show information regarding the web being available to access.

Normally at the end there is a meesage saying that the web interface is available at 127.0.0.0:8000

I just desapeared because I was able to earlier. I dont know if a misconfigured something

 

fromero_0-1706307621113.png

Appreciate the help

 

Labels (2)
0 Karma
1 Solution

isoutamo
SplunkTrust
SplunkTrust

gcusello
SplunkTrust
SplunkTrust

Hi @fromero ,

if you run "your_ip_address:8000" can you access the web GUI of your Splunk server?

If not there could be two issues:

  • as @isoutamo said, the web interfaces could be disabled, if this is your firt installation it's very rare,
  • you didn't disable the local firewall  (iptables).

In the second case disable iptables and try again.

Ciao.

Giuseppe

isoutamo
SplunkTrust
SplunkTrust

Based on screen shot the web server is disabled, so there shouldn’t be anything listening on port 8000. Unless it’s not disabled then you should found reason why it’s not try to start it from splunkd.log.

isoutamo
SplunkTrust
SplunkTrust

Hi

you should check if you have disabled web server. See https://docs.splunk.com/Documentation/Splunk/latest/Security/DisableunnecessarySplunkcomponents

r. Ismo

Get Updates on the Splunk Community!

Archived Metrics Now Available for APAC and EMEA realms

We’re excited to announce the launch of Archived Metrics in Splunk Infrastructure Monitoring for our customers ...

Detecting Remote Code Executions With the Splunk Threat Research Team

WATCH NOWRemote code execution (RCE) vulnerabilities pose a significant risk to organizations. If exploited, ...

Enter the Dashboard Challenge and Watch the .conf24 Global Broadcast!

The Splunk Community Dashboard Challenge is still happening, and it's not too late to enter for the week of ...