Installation

Why am I getting "ERROR: The http port [8000] is already bound." trying to start Splunk after installation on Linux?

gurinderbhatti
Path Finder

I am installing the splunk package and after untaring the pkg on a linux box i am trying to start splunk (tried both as root and as a splunk user)
and getting the below error:

Checking prerequisites...
Checking http port [8000]: already bound
ERROR: The http port [8000] is already bound. Splunk needs to use this port.
Would you like to change ports? [y/n]: n
Exiting....

checking output of netstat reveals the following:

[root@hostA ~]# netstat -na | grep 8000
tcp 0 0 0.0.0.0:8000 0.0.0.0:* LISTEN

Any ideas how i can get splunk to start running?

Labels (1)
1 Solution

gurinderbhatti
Path Finder

there was a python process which was tied to this somehow, killed that process and was able to start the splunk daemon.

View solution in original post

vnguyen46
Contributor

I would add this :
Run: lsof -i :8000
Then note the record with PID
Run: kill -9 PID#
Then restart splunk.

computermathguy
Path Finder

My SHC captain displayed the message:

Checking http port [8000]: not available
ERROR: http port [8000] - port is already bound. Splunk needs to use this port.
Would you like to change ports? [y/n]:

Killing the pid correlated to port 8000 worked.

0 Karma

sibanandapani1
Explorer

try running lsof -i :8000

you will be able to find, one process running with root.py (python process)

once you will kill that process, kill -9 you will be able to bring up on 8000 port.

gurinderbhatti
Path Finder

there was a python process which was tied to this somehow, killed that process and was able to start the splunk daemon.

sbrant_splunk
Splunk Employee
Splunk Employee

It appears that there is some process already listening on that port. You can always choose an alternate port for Splunk, which may be easier than changing whatever the other process is. You can check to see what the other process is by running:

lsof -i :8000
Get Updates on the Splunk Community!

ATTENTION!! We’re MOVING (not really)

Hey, all! In an effort to keep this Slack workspace secure and also to make our new members' experience easy, ...

Splunk Admins: Build a Smarter Stack with These Must-See .conf25 Sessions

  Whether you're running a complex Splunk deployment or just getting your bearings as a new admin, .conf25 ...

AppDynamics Summer Webinars

This summer, our mighty AppDynamics team is cooking up some delicious content on YouTube Live to satiate your ...