Security

Splunk port issue

uagraw01
Motivator

Hello SPlunkers!!

I have upgraded my HF from 8.0.0 to 8.1.2, while upgradation everything is working fine. But the issue is the i am not able to open the server on UI on port 8000.

tcp 0 0 0.0.0.0:8000 0.0.0.0:* LISTEN 2170/splunkd

port 8000 is also working fine.

But the issue is that whenever i have tried to pen the server from Ui it throughing bad request error.

 

What the things i have done yet.

1. copy the web.conf file from the system default to system local

2. change the splunk user cmod splunk:splunk /opt/splunk

But still the issue is persist please help me to get it resolve.

 

 

0 Karma

Siddharth
Path Finder

Kill the splunk service and restart the server It have happened with me and worked after server restart . Please do check all the crontab running on the server before reboot it will take around 4-5 mins 

To reboot switch to sudo account then use the command  "reboot"

0 Karma

KulvinderSingh
Path Finder

I think I know what went wrong

chmod splunk:splunk  -R /opt/splunk

you forgot to add change permissions on directory level you need to add -R to the command to add permissions recursively.

hope that helps.

 

Tags (1)
0 Karma

isoutamo
SplunkTrust
SplunkTrust
What you can found from log files e.g. splunkd.log at /opt/splunk/var/log/splunk?
0 Karma

uagraw01
Motivator

There is no error as such in splunkd.log. But my UI is not working

0 Karma
Get Updates on the Splunk Community!

Splunk MCP & Agentic AI: Machine Data Without Limits

  Discover how the Splunk Model Context Protocol (MCP) Server can revolutionize the way your organization ...

Finding Based Detections General Availability

Overview  We’ve come a long way, folks, but here in Enterprise Security 8.4 I’m happy to announce Finding ...

Get Your Hands Dirty (and Your Shoes Comfy): The Splunk Experience

Hands-On Learning and Technical Seminars  Sometimes, you just need to see the code. For those looking for a ...