Knowledge Management

What are the default ports and services being used on docs for the Splunk heavy forwarder and Splunk ES?

lexesco99
Engager

I have a simple question for documentation purposes. What are the default ports and services being used on them for the Splunk heavy forwarder and Splunk ES?

Labels (1)
0 Karma
1 Solution

gcusello
SplunkTrust
SplunkTrust

Hi @lexesco99,

the main default ports used by an HF are:

  • 8089 for management,
  • 9997 for data receiving and forwarding, but it configurable another one,
  • 8000 for GUI.

ES is an App that uses the Splunk infrastructure so it hasn't different or own ports.

there are also other ports for clusters, and KV store.

Anyway, here you can find all the Splunk ports. https://docs.splunk.com/Documentation/Splunk/9.0.3/InheritedDeployment/Ports

Ciao.

Giuseppe

 

View solution in original post

gcusello
SplunkTrust
SplunkTrust

Hi @lexesco99,

the main default ports used by an HF are:

  • 8089 for management,
  • 9997 for data receiving and forwarding, but it configurable another one,
  • 8000 for GUI.

ES is an App that uses the Splunk infrastructure so it hasn't different or own ports.

there are also other ports for clusters, and KV store.

Anyway, here you can find all the Splunk ports. https://docs.splunk.com/Documentation/Splunk/9.0.3/InheritedDeployment/Ports

Ciao.

Giuseppe

 

Get Updates on the Splunk Community!

Why You Can't Miss .conf25: Unleashing the Power of Agentic AI with Splunk & Cisco

The Defining Technology Movement of Our Lifetime The advent of agentic AI is arguably the defining technology ...

Deep Dive into Federated Analytics: Unlocking the Full Power of Your Security Data

In today’s complex digital landscape, security teams face increasing pressure to protect sprawling data across ...

Your summer travels continue with new course releases

Summer in the Northern hemisphere is in full swing, and is often a time to travel and explore. If your summer ...