Security

"acceptFrom" option in web.conf doesn't work

yangban
Explorer

Hi

Could you help me with "web.conf"?

I would like to accept or block users to access to web interface with IP address.

So I found "acceptFrom" option and applied to /system/local/web.conf

But when I tried to restart Splunk, I got this error: "WARNING: web interface does not seem to be available!"

splunkd log shows

02-07-2019 17:35:51.968 +0900 WARN HTTPServer - Refusing HTTP connection from 127.0.0.1 due to server ACL
02-07-2019 17:35:52.069 +0900 WARN HTTPServer - Refusing HTTP connection from 127.0.0.1 due to server ACL
02-07-2019 17:35:52.085 +0900 WARN HTTPServer - Refusing HTTP connection from "my local IP" due to server ACL

02-07-2019 17:35:52.093 +0900 WARN HTTPServer - Refusing HTTP connection from "my local IP" due to server ACL

And my web.conf settings are like this

[settings]

acceptFrom = "my local IP"

Thanks for reading this.

0 Karma
1 Solution

chrisyounger
SplunkTrust
SplunkTrust

What about if you do acceptFrom = 127.0.0.1,my local IP

View solution in original post

0 Karma

chrisyounger
SplunkTrust
SplunkTrust

What about if you do acceptFrom = 127.0.0.1,my local IP

0 Karma

yangban
Explorer

Thank you for your answer. But i already tried and got the same result.

0 Karma

yangban
Explorer

It took me a whole day to figure out, but I took out the quotation mark and it worked. And must include "127.0.0.1". Thank you so much for your help @chrisyoungerjds

0 Karma
Get Updates on the Splunk Community!

Index This | When is October more than just the tenth month?

October 2025 Edition  Hayyy Splunk Education Enthusiasts and the Eternally Curious!   We’re back with this ...

Observe and Secure All Apps with Splunk

  Join Us for Our Next Tech Talk: Observe and Secure All Apps with SplunkAs organizations continue to innovate ...

What’s New & Next in Splunk SOAR

 Security teams today are dealing with more alerts, more tools, and more pressure than ever.  Join us for an ...