Fresh splunk install - This site can’t be reached

[inventsekar]

Hi, 

A fresh install of splunk enterprise on my ubuntu:

root@sekar:/opt/splunk/var/log/splunk# uname -a
Linux sekar.splunk.com 4.15.0-101-generic #102-Ubuntu SMP Mon May 11 10:07:26 UTC 2020 x86_64 x86_64 x86_64 GNU/Linux
root@sekar:/opt/splunk/var/log/splunk# 

install went fine, service is running fine as well..

root@sekar:/opt/splunk/bin# ./splunk status
splunkd is running (PID: 5462).
splunk helpers are running (PIDs: 5463 5477 5550 5564).
root@sekar:/opt/splunk/bin#  

port 8000 is used by splunkd only..

root@sekar:/opt/splunk/bin# lsof -i :8000
COMMAND PID USER FD TYPE DEVICE SIZE/OFF NODE NAME
splunkd 5462 root 112u IPv4 57851 0t0 TCP *:8000 (LISTEN)
root@sekar:/opt/splunk/bin#  

still, the splunk web page is not loading up.. it says:  This site can’t be reached

sekar.splunk.com took too long to respond.

Try:

• Checking the connection
• Checking the proxy and the firewall

ERR_CONNECTION_TIMED_OUT

please suggest. thanks. 

[gcusello]

Hi @inventsekar ,

some stupid questions:

• did you disabled iptables or local firewalls?
• did you checked the user running Splunk?

Ciao.

Giuseppe

[inventsekar]

Hi @gcusello the local firewall is turned off, 

ubuntu@sekar:~$ sudo ufw status
[sudo] password for ubuntu:
Status: inactive
ubuntu@sekar:~$ 

the user running the splunk process is root. 

the issue is with the hostname "http://sekar.splunk.com:8000"

but, its connecting to 127.0.0.1 fine.. (http://127.0.0.1:8000/en-GB/account/login?return_to=%2Fen-GB%2F   )

ok, i have setup this around 3 months ago..seems something broken, let me check it, thanks.