Security

Splunk port issue

uagraw01
Motivator

Hello SPlunkers!!

I have upgraded my HF from 8.0.0 to 8.1.2, while upgradation everything is working fine. But the issue is the i am not able to open the server on UI on port 8000.

tcp 0 0 0.0.0.0:8000 0.0.0.0:* LISTEN 2170/splunkd

port 8000 is also working fine.

But the issue is that whenever i have tried to pen the server from Ui it throughing bad request error.

 

What the things i have done yet.

1. copy the web.conf file from the system default to system local

2. change the splunk user cmod splunk:splunk /opt/splunk

But still the issue is persist please help me to get it resolve.

 

 

0 Karma

Siddharth
Path Finder

Kill the splunk service and restart the server It have happened with me and worked after server restart . Please do check all the crontab running on the server before reboot it will take around 4-5 mins 

To reboot switch to sudo account then use the command  "reboot"

0 Karma

KulvinderSingh
Path Finder

I think I know what went wrong

chmod splunk:splunk  -R /opt/splunk

you forgot to add change permissions on directory level you need to add -R to the command to add permissions recursively.

hope that helps.

 

Tags (1)
0 Karma

isoutamo
SplunkTrust
SplunkTrust
What you can found from log files e.g. splunkd.log at /opt/splunk/var/log/splunk?
0 Karma

uagraw01
Motivator

There is no error as such in splunkd.log. But my UI is not working

0 Karma
Get Updates on the Splunk Community!

New Year, New Changes for Splunk Certifications

As we embrace a new year, we’re making a small but important update to the Splunk Certification ...

[Puzzles] Solve, Learn, Repeat: Unmerging HTML Tables

[Puzzles] Solve, Learn, Repeat: Unmerging HTML TablesFor a previous puzzle, I needed some sample data, and ...

Enterprise Security (ES) Essentials 8.3 is Now GA — Smarter Detections, Faster ...

As of today, Enterprise Security (ES) Essentials 8.3 is now generally available, helping SOC teams simplify ...