When logging in, an error appears: "The splunkd daemon cannot be reached by splunkweb"

[abhayneilam]

When I am giving my username and password I am getting the following error :

The splunkd daemon cannot be reached by splunkweb

Pleaes help me out for this problem , I have restared the service many times but all in vain

Please help me

[zuit]

If there's nothing in the logs, make sure splunkd is running.

Cheers,

-Brian

[ii_splunk]

I had the same problem; I assume someone in my AD team changed something but I had to change the following to get it working again:

Manager » Access controls » Authentication method » LDAP strategies » ActiveDirectory Help | About

Uncheck: Enable referrals with anonymous bind only

[jchampagne]

This saved me

[cmonig]

This tip helped immensely. Strange issue, very difficult to pick up. I did not find any entry in the splunkd.log that pointed me to this, how did you find it?

[abhayneilam]

Many Many thanks 🙂

[hexx]

The file you want to look at is located in %SPLUNK_HOME%\var\log\splunk\splunkd.log. It's a simple text file, so you can open it with any text editor.

If you have purchased a license, I would suggest that you open a support case and attach a splunk diag to it.

[abhayneilam]

Hello hexx,

I am using SPLUNK in windows platform, I dont know how to see the log file, could you please help me out regarding this

Thanks in advance !!

[hexx]

If you tail -f splunkd.log while you attempt to login, do you see any errors or warnings?

[ChrisG · Accepted solution]

It's possible that you don't have a working DNS server, or that your firewall might be blocking access to ports 8089 and 8000. Make sure both those ports are open. If you can provide some more information about your environment, the community here might be able to give you better answers.