I just installed Splunk Enterprise on my Mac. Started Splunk and got into Splunk Web UI.
When I click the large Plus to add a new app, I see this:
Error connecting: Connection refused
Any ideas? Proxy settings on the command line and in System Prefs are correct. Is there a log I can look at to see what's going on? Is there a log settings I can change to get more verbosity for this?
Can you navigate to http://www.splunkbase.com from your laptop? The message that you are seeing normally means that there is a firewall blocking Splunk's access to the internet.
You might be able to find more information about this error in one of Splunk's internal logs. On the Mac, you will probably find the internal logs under /Applications/splunk/var/log/splunk. The file splunkd.log is good for most errors, but for this I might scan most of the logs. BTW, all of the logs in this directory are indexed in Splunk: you can run searches again the _internal index to hunt for errors.
If all else fails, you can go directly to Splunkbase via a browser and download the files to your Mac. Then in Splunk, choose the option to install the app from a file and point to the file(s) you downloaded...
seems like is fw issue.
But i have issue with proxy, i need to set to go over proxy.
I done that in shell for update etc. but seems dont work on web...
where is setup for proxy inside splunk?