My server has 2 IP addresses and i need to bind the splunk web to 1 IP and the splunk daemon to the other IP address.
i configure the server.socket_host setting in web.conf.
the splunk web indeed has bind to the IP address
However, when i modify $SPLUNK_HOME/etc/splunk-launch.conf to include the SPLUNK_BINDIP attribute and
How do i ultimately get to bind the web and daemon to 2 different IP addresses?
This is the reply i've gotten from Splunk Support:
I believe we cannot have this kind of feature at the moment, I can help to file an enhancement request for that if the product team will provide this kind of feature. I think it is worth having of the ports binding to 2 difference of IP addresses. Thanks for your suggestion.
I have an issue doing this, I needed to bind the web UI on port 8000 but leave the rest of splunk listening on 127.0.0.1. I was able to accomplish this however when I start splunk it still shows that it is trying to start on 127.0.0.1:8000. Is this just an annoyan ce I'll need to live with?
Waiting for web server at http://127.0.0.1:8000 to be available...........................................................................server.socket_host...................................................................................................................................................................................................^C
Is there any solution for that ? I want to have 8089 be listened from 127.0.0.1 but 8000 - from particular external IP.
This is the reply i've gotten from Splunk Support:
I believe we cannot have this kind of feature at the moment, I can help to file an enhancement request for that if the product team will provide this kind of feature. I think it is worth having of the ports binding to 2 difference of IP addresses. Thanks for your suggestion.
Dear deyeo,
Is there any update in this topic?
I have a similar problem: need to bind splunk-web to a specific IP, while need to receive logs on all ip.
Thanks,
István
I'm having trouble with this as well and would love an answer.
Thanks!