Knowledge Management

What are the default ports and services being used on docs for the Splunk heavy forwarder and Splunk ES?

lexesco99
Engager

I have a simple question for documentation purposes. What are the default ports and services being used on them for the Splunk heavy forwarder and Splunk ES?

Labels (1)
0 Karma
1 Solution

gcusello
SplunkTrust
SplunkTrust

Hi @lexesco99,

the main default ports used by an HF are:

  • 8089 for management,
  • 9997 for data receiving and forwarding, but it configurable another one,
  • 8000 for GUI.

ES is an App that uses the Splunk infrastructure so it hasn't different or own ports.

there are also other ports for clusters, and KV store.

Anyway, here you can find all the Splunk ports. https://docs.splunk.com/Documentation/Splunk/9.0.3/InheritedDeployment/Ports

Ciao.

Giuseppe

 

View solution in original post

gcusello
SplunkTrust
SplunkTrust

Hi @lexesco99,

the main default ports used by an HF are:

  • 8089 for management,
  • 9997 for data receiving and forwarding, but it configurable another one,
  • 8000 for GUI.

ES is an App that uses the Splunk infrastructure so it hasn't different or own ports.

there are also other ports for clusters, and KV store.

Anyway, here you can find all the Splunk ports. https://docs.splunk.com/Documentation/Splunk/9.0.3/InheritedDeployment/Ports

Ciao.

Giuseppe

 

Get Updates on the Splunk Community!

Take Your Breath Away with Splunk Risk-Based Alerting (RBA)

WATCH NOW!The Splunk Guide to Risk-Based Alerting is here to empower your SOC like never before. Join Haylee ...

SignalFlow: What? Why? How?

What is SignalFlow? Splunk Observability Cloud’s analytics engine, SignalFlow, opens up a world of in-depth ...

Federated Search for Amazon S3 | Key Use Cases to Streamline Compliance Workflows

Modern business operations are supported by data compliance. As regulations evolve, organizations must ...