Splunk Search

Splunk wont open on localhost:8000.

ksukumaran
New Member

Im getting a "not found" error. On trying to start splunk in the 'bin' folder I am getting am error. Any help appreciated!

C:\Program Files\Splunk\bin>splunk start

Splunk> Like an F-18, bro.

Checking prerequisites...
Checking http port [8001]: not available
ERROR: http port [8001] - port is already bound. Splunk needs to use this port.
Would you like to change ports? [y/n]: y
Enter a new http port: 9000
Setting http to port: 9000
Failed to open splunk.secret 'C:\Program Files\Splunk\etc\auth\splunk.secret' file. Some passwords will not work. errno=Access is denied.
Unable to read 'C:\Program Files\Splunk\etc\auth\splunk.secret' file.
Operation "ospath_fopen" failed in C:\wrangler-2.0\build-src\kimono\src\libzero\conf-mutator-locking.c:313, conf_mutator_lock(); No error

Tags (1)
0 Karma
1 Solution

Sukisen1981
Champion

just try changing url in browser to
http://localhost:8001/
It worked for me

View solution in original post

0 Karma

Manojkumar_B
Engager

Thanks  @mohanrajanna , it worked. 
After starting the splunkd, it takes couple of seconds to reflect the changes in web browser.

0 Karma

Sukisen1981
Champion

just try changing url in browser to
http://localhost:8001/
It worked for me

0 Karma

Mahamud
New Member

Thanks 

0 Karma

ksukumaran
New Member

thank you! that worked..

0 Karma

mackintosh
New Member

This works for me too. 🙂

0 Karma

Guiang_8
New Member

I had the same problem. and change the url browser worked. Thanks.

0 Karma

niketn
Legend

@ksukumaran are you running command prompt as an administrator? If not please do so and it should work.

Also check in Windows Task Manager as to which program is using Port 8001. If you can temporarily disable that, you can launch Splunk and then change Splunk Port from 8001 to your preferred port using Splunk > Settings > Server Settings > General Settings > Web Port.

Alternate approach (NOT RECOMMENDED- as this change will get overridden by re-install and Splunk will complain of manifest change): You can also do this manually from $SPLUNK_HOME\etc\system\default\web.conf by changing:

httpport = 9000
____________________________________________
| makeresults | eval message= "Happy Splunking!!!"
0 Karma

mohanrajanna
Engager

If you are using Windows, check Task manager to see if splunkd service is running under process tab.
If you don't see splunkd service that means you need to start Splunk service.
Choose splunkd services under services tab in task manager and right click and select start.
Now refresh the login page. It should work.
Let me know if it doesn't work.

skallu1
Observer

It did not work for me

0 Karma

dpkvrm7777
New Member

Thanks mohanrajanna, it worked....

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

[Puzzles] Solve, Learn, Repeat: Matching cron expressions

This puzzle (first published here) is based on matching timestamps to cron expressions.All the timestamps ...

Design, Compete, Win: Submit Your Best Splunk Dashboards for a .conf26 Pass

Hello Splunkers,  We’re excited to kick off a Splunk Dashboard contest! We know that dashboards are a primary ...

May 2026 Splunk Expert Sessions: Security & Observability

Level Up Your Operations: May 2026 Splunk Expert Sessions Whether you are refining your security posture or ...