I am doing Splunk Fundamentals 1 and 2 course. To practice lab, I have been logging in using http://localhost:8001 but now it is not connecting.
Can you check web.conf in /etc/system/default and check for the port that is set for splunkweb see attribute "httpport".
So if it is set to port 8002 you use http://localhost:8002
You need to provide more details. Is Splunk running on your machine ?
Yes. It is running on my desktop
Are there any error message in $SPLUNK_HOME/var/log/splunk/splunkd.log
or $SPLUNK_HOME/var/log/splunk/web_service.log
? Are you running splunk on http or https ? Have you tried to connect using https://localhost:8001 ? By default splunk web runs on port 8000 but in your question you mentioned port 8001 so have you changed configuration to run splunk web on port 8001 ?
localhost:8000 is throwing "Page not found error". One of my colleagues checked with Splunk support team and was suggested to use 8001. It was working till 2 days before. From yesterday it is not working. And yes, I tried https://localhost:8001 as well and getting below error.
This site can’t be reachedlocalhost refused to connect.
Try:
Checking the connection
Checking the proxy and the firewall
ERR_CONNECTION_REFUSED
Is it possible you have restarted your workstation, and might you be running on a mac?
By default, a Mac install will not start the splunk service on system restart.
Yes. My system is restarted but it is not Mac. Mine is windows.
For Fundamentals 2 course, I have lab server to which I can directly connect. Splunk has given that facility.
I will post questions further if any. Thank you very much.
I will try this. Thank you
Are there any error message in $SPLUNK_HOME/var/log/splunk/splunkd.log
or $SPLUNK_HOME/var/log/splunk/web_service.log
or $SPLUNK_HOME/var/log/splunk/web_access.log
?
Have to check yet. Will get back soon