I install Splunk universal Forwarder and ran it, it started but i am not able to access the http site after entering the ip with port number on linux
The Universal Forwarder has no UI. Splunk Web isn't available on it, so there's no http site to go to.
https://docs.splunk.com/Documentation/Splunk/9.2.0/Forwarding/Typesofforwarders
To get a UI like that *on a forwarder* you'll need to install a Heavy Forwarder which is actually just the full Splunk server installation - what makes it a HF instead of just "Regular Splunk" is how it's configured later to both receive and 'forward' data in to another Splunk instance.
Or just an install of the full Splunk installation.
Hi
it’s like @Richfez said. UF hasn’t any UI component. Earlier it has management port enabled, but currently even it is disabled by default.
Why you are thinking that you need a GUI on UF? Usually it has configured by DS or other tool wit apps.
r. Ismo