Splunk Search

framework and splunk both run?

a212830
Champion

Hi,

I'm a little confused with how the app framework works. Does it run seperately outside of splunk? One of our developers installed in their environment, and it's running on port 3000, and people login to that port. Can someone explain this?

Tags (1)

mgroves_splunk
Splunk Employee
Splunk Employee

When the Application Framework is installed it creates a proxy port (3000) that routes traffic to either to standard Splunk apps running on port 8000, or Framework Apps running on port 8080.

The App Framework is running within Django outside of Splunk Web but communicating with splunkd.

Thanks
Mark

mgroves_splunk
Splunk Employee
Splunk Employee

Although users can still go to the Splunk Web port (default 8000), to get the integrated experience of both new Framework and existing Splunk apps users will need to hit the App Framework port (default 3000).

Regarding SSO, the App Framework does not currently support SSO. So users hitting the App Framework interface will be prompted for login.

0 Karma

cdo_splunk
Splunk Employee
Splunk Employee

Version 6, Django page is using port 8000 but still being prompt for login for SSO.

0 Karma

a212830
Champion

So, do I have one set of ports for the app framework stuff, and another for classic splunk? How does this work with SSO?

0 Karma

a212830
Champion

No, when we try to install the app framework, it asks us for a port.If I specify the standard splunk port, it's in use. The developers (who did this on their own) have people pointing to two seperate ports.

0 Karma

linu1988
Champion

Are you taking about splunk web port/splunkd port? You can specify all of them according to your wish. Then you can it for your access on those ports.

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Painting a Clearer Picture: Creating Cross-Domain Visibility with AI Canvas

    Thursday, June 25, 2026  |  11AM PDT / 2PM EDT  Duration: 1 Hour (Includes live Q&A) Register to ...

Analytics Workspace deprecation

As of Splunk Cloud Platform 10.4.2604 and Splunk Enterprise 10.4, Analytics Workspace is now deprecated. ...

Splunk Developer Day Recap: Building, Publishing, and Growing on the Splunk Platform

Splunk Developer Day brought the Splunk developer community together for a practical look at what it means to ...