Installation

Unable to access web UI

fromero
Splunk Employee
Splunk Employee

Hi all, I am new to splunk

When I start splunk, it does not show information regarding the web being available to access.

Normally at the end there is a meesage saying that the web interface is available at 127.0.0.0:8000

I just desapeared because I was able to earlier. I dont know if a misconfigured something

 

fromero_0-1706307621113.png

Appreciate the help

 

Labels (2)
0 Karma
1 Solution

isoutamo
SplunkTrust
SplunkTrust

gcusello
SplunkTrust
SplunkTrust

Hi @fromero ,

if you run "your_ip_address:8000" can you access the web GUI of your Splunk server?

If not there could be two issues:

  • as @isoutamo said, the web interfaces could be disabled, if this is your firt installation it's very rare,
  • you didn't disable the local firewall  (iptables).

In the second case disable iptables and try again.

Ciao.

Giuseppe

isoutamo
SplunkTrust
SplunkTrust

Based on screen shot the web server is disabled, so there shouldn’t be anything listening on port 8000. Unless it’s not disabled then you should found reason why it’s not try to start it from splunkd.log.

isoutamo
SplunkTrust
SplunkTrust

Hi

you should check if you have disabled web server. See https://docs.splunk.com/Documentation/Splunk/latest/Security/DisableunnecessarySplunkcomponents

r. Ismo

Get Updates on the Splunk Community!

Now Available: Cisco Talos Threat Intelligence Integrations for Splunk Security Cloud ...

At .conf24, we shared that we were in the process of integrating Cisco Talos threat intelligence into Splunk ...

Preparing your Splunk Environment for OpenSSL3

The Splunk platform will transition to OpenSSL version 3 in a future release. Actions are required to prepare ...

Easily Improve Agent Saturation with the Splunk Add-on for OpenTelemetry Collector

Agent Saturation What and Whys In application performance monitoring, saturation is defined as the total load ...