Splunk Enterprise

How can i know what is the web ui address of new installed splunk?

jadengoho
Builder

I installed a new Splunk enterprise in the box ,
We are using a cluster environment , and we have 2 different IP address .
Example : 10.80.246.100 - internal ip
10.80.243.32 - is the web (this is given by the previous splunk team)

Is there a way i can find the web ui address of the splunk ?
I already tried web.conf = 127.0..0.1:8089 ( just showing splunkd)

Tags (2)
0 Karma

mayurr98
Super Champion

restart Splunk on the command line, ./splunk restart
check the URL and port of Splunk web provided at the end of the launch output.
verify if you need HTTP or HTTPS
(default should be http://localhost:8000)

0 Karma

jadengoho
Builder

I did restart and this is what is see:
Splunk> The Notorious B.I.G. D.A.T.A.

Checking prerequisites...
        Checking http port [8000]: open
        Checking mgmt port [8089]: open
        Checking appserver port [127.0.0.1:8065]: open
        Checking kvstore port [8191]: open
        Checking configuration...  Done.
        Checking critical directories...        Done
        Checking indexes...
                Validated: _audit _internal _introspection _telemetry _
        Done


Bypassing local license checks since this instance is configured with a remote license master.

        Checking filesystem compatibility...  Done
        Checking conf files for problems...
        Done
        Checking default conf files for edits...
        Validating installed files against hashes from '/opt/splunk/splunk-7.0.0-c8a78efdd40f-linux-2.6-x86_64-manifest'
        All installed files intact.
        Done
All preliminary checks passed.

Starting splunk server daemon (splunkd)...
Done
 [  OK  ]

Waiting for web server at https://127.0.0.1:8000 to be available... Done


If you get stuck, we're here to help.
Look for answers here: http://docs.splunk.com

The Splunk web interface is at https://<hostname>:8000

But, as i mention . previous team set it in 2 diffrent network :
10.80.246.100 - internal ip
10.80.243.32 - is the web (this is given by the previous splunk team)

now the restart shows :"8000" , - ERROR page
https://:8000 - Error page ,
[Is there a way i can see what address/network is the UI of the new install app displaying ?

0 Karma

xpac
SplunkTrust
SplunkTrust

By default it should be available on all IP addresses.

You can try netstat -tulpan | grep 8000 to see where Splunk is actually listening.

jadengoho
Builder

I will try this , and also ask our infra team , if they knew about this matter , thanks xpac .

0 Karma
Get Updates on the Splunk Community!

[Puzzles] Solve, Learn, Repeat: Dynamic formatting from XML events

This challenge was first posted on Slack #puzzles channelFor a previous puzzle, I needed a set of fixed-length ...

Enter the Agentic Era with Splunk AI Assistant for SPL 1.4

  &#x1f680; Your data just got a serious AI upgrade — are you ready? Say hello to the Agentic Era with the ...

Stronger Security with Federated Search for S3, GCP SQL & Australian Threat ...

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...