- Find Answers
- :
- Splunk Administration
- :
- Monitoring Splunk
- :
- Change splunkd management port on Universal forwar...
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark Topic
- Subscribe to Topic
- Mute Topic
- Printer Friendly Page
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
I would like to change the splunk management port from 8089 to some higher port say 9089. What is the best way to do this? Should i use the Splunk CLI or change it using web.conf file? Also I am using a deployment server to manage the UF. Should I change the port on deployment server as well?
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Here is the way to change the default splunk forwarder management port:
In "/etc/system/local", add the following file and contents:
web.conf with
[settings]
mgmtHostPort = 127.0.0.1:9089
and restart splunk.
It will be like this.
Splunk Server OR DS(ANY)->UF(9089)
UF(ANY)->DS(8089)
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Otherwise you can change splunkd port via Web UI or by CLI as mentioned in this answer:
https://answers.splunk.com/answers/67/how-do-i-change-the-ports-that-splunk-listens-on.html
NOTE: The way you change Management Port by Web UI has changed:
- Log in as Admin
- Go to Settings
- Go to Server settings
- Look for Management port and change it
- Save your work!
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Here is the way to change the default splunk forwarder management port:
In "/etc/system/local", add the following file and contents:
web.conf with
[settings]
mgmtHostPort = 127.0.0.1:9089
and restart splunk.
It will be like this.
Splunk Server OR DS(ANY)->UF(9089)
UF(ANY)->DS(8089)
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Ok so we dont need to change anything in deployment server right?
Say goodbye to manually analyzing phishing and malware threats with Splunk Attack ...
AppDynamics is now part of Splunk Ideas
Advanced Splunk Data Management Strategies
