What are the default ports and services being used on docs for the Splunk heavy forwarder and Splunk ES?

[lexesco99]

I have a simple question for documentation purposes. What are the default ports and services being used on them for the Splunk heavy forwarder and Splunk ES?

[gcusello · Accepted solution]

Hi @lexesco99,

the main default ports used by an HF are:

• 8089 for management,
• 9997 for data receiving and forwarding, but it configurable another one,
• 8000 for GUI.

ES is an App that uses the Splunk infrastructure so it hasn't different or own ports.

there are also other ports for clusters, and KV store.

Anyway, here you can find all the Splunk ports. https://docs.splunk.com/Documentation/Splunk/9.0.3/InheritedDeployment/Ports

Ciao.

Giuseppe