Security

Splunk port issue

uagraw01
Motivator

Hello SPlunkers!!

I have upgraded my HF from 8.0.0 to 8.1.2, while upgradation everything is working fine. But the issue is the i am not able to open the server on UI on port 8000.

tcp 0 0 0.0.0.0:8000 0.0.0.0:* LISTEN 2170/splunkd

port 8000 is also working fine.

But the issue is that whenever i have tried to pen the server from Ui it throughing bad request error.

 

What the things i have done yet.

1. copy the web.conf file from the system default to system local

2. change the splunk user cmod splunk:splunk /opt/splunk

But still the issue is persist please help me to get it resolve.

 

 

0 Karma

Siddharth
Path Finder

Kill the splunk service and restart the server It have happened with me and worked after server restart . Please do check all the crontab running on the server before reboot it will take around 4-5 mins 

To reboot switch to sudo account then use the command  "reboot"

0 Karma

KulvinderSingh
Path Finder

I think I know what went wrong

chmod splunk:splunk  -R /opt/splunk

you forgot to add change permissions on directory level you need to add -R to the command to add permissions recursively.

hope that helps.

 

Tags (1)
0 Karma

isoutamo
SplunkTrust
SplunkTrust
What you can found from log files e.g. splunkd.log at /opt/splunk/var/log/splunk?
0 Karma

uagraw01
Motivator

There is no error as such in splunkd.log. But my UI is not working

0 Karma
Get Updates on the Splunk Community!

Splunk Observability for AI

Don’t miss out on an exciting Tech Talk on Splunk Observability for AI! Discover how Splunk’s agentic AI ...

[Puzzles] Solve, Learn, Repeat: Dereferencing XML to Fixed-length events

This challenge was first posted on Slack #puzzles channelFor a previous puzzle, I needed a set of fixed-length ...

Stay Connected: Your Guide to December Tech Talks, Office Hours, and Webinars!

What are Community Office Hours? Community Office Hours is an interactive 60-minute Zoom series where ...