Splunk Search

Splunk wont open on localhost:8000.

ksukumaran
New Member

Im getting a "not found" error. On trying to start splunk in the 'bin' folder I am getting am error. Any help appreciated!

C:\Program Files\Splunk\bin>splunk start

Splunk> Like an F-18, bro.

Checking prerequisites...
Checking http port [8001]: not available
ERROR: http port [8001] - port is already bound. Splunk needs to use this port.
Would you like to change ports? [y/n]: y
Enter a new http port: 9000
Setting http to port: 9000
Failed to open splunk.secret 'C:\Program Files\Splunk\etc\auth\splunk.secret' file. Some passwords will not work. errno=Access is denied.
Unable to read 'C:\Program Files\Splunk\etc\auth\splunk.secret' file.
Operation "ospath_fopen" failed in C:\wrangler-2.0\build-src\kimono\src\libzero\conf-mutator-locking.c:313, conf_mutator_lock(); No error

Tags (1)
0 Karma
1 Solution

Sukisen1981
Champion

just try changing url in browser to
http://localhost:8001/
It worked for me

View solution in original post

0 Karma

Manojkumar_B
Engager

Thanks  @mohanrajanna , it worked. 
After starting the splunkd, it takes couple of seconds to reflect the changes in web browser.

0 Karma

Sukisen1981
Champion

just try changing url in browser to
http://localhost:8001/
It worked for me

0 Karma

Mahamud
New Member

Thanks 

0 Karma

ksukumaran
New Member

thank you! that worked..

0 Karma

mackintosh
New Member

This works for me too. 🙂

0 Karma

Guiang_8
New Member

I had the same problem. and change the url browser worked. Thanks.

0 Karma

niketn
Legend

@ksukumaran are you running command prompt as an administrator? If not please do so and it should work.

Also check in Windows Task Manager as to which program is using Port 8001. If you can temporarily disable that, you can launch Splunk and then change Splunk Port from 8001 to your preferred port using Splunk > Settings > Server Settings > General Settings > Web Port.

Alternate approach (NOT RECOMMENDED- as this change will get overridden by re-install and Splunk will complain of manifest change): You can also do this manually from $SPLUNK_HOME\etc\system\default\web.conf by changing:

httpport = 9000
____________________________________________
| makeresults | eval message= "Happy Splunking!!!"
0 Karma

mohanrajanna
Engager

If you are using Windows, check Task manager to see if splunkd service is running under process tab.
If you don't see splunkd service that means you need to start Splunk service.
Choose splunkd services under services tab in task manager and right click and select start.
Now refresh the login page. It should work.
Let me know if it doesn't work.

skallu1
Observer

It did not work for me

0 Karma

dpkvrm7777
New Member

Thanks mohanrajanna, it worked....

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Announcing Modern Navigation: A New Era of Splunk User Experience

We are excited to introduce the Modern Navigation feature in the Splunk Platform, available to both cloud and ...

Modernize your Splunk Apps – Introducing Python 3.13 in Splunk

We are excited to announce that the upcoming releases of Splunk Enterprise 10.2.x and Splunk Cloud Platform ...

Step into “Hunt the Insider: An Splunk ES Premier Mystery” to catch a cybercriminal ...

After a whole week of being on call, you fell asleep on your keyboard, and you hit a sequence of buttons that ...