Refine your search:

My Enterprise Trial license was just about to expire, so I applied the "free" license. Since there is no authentication in free, I'd like to only be able access Splunk Web from the server running Splunk itself. However, I can still get to it from my workstation remotely.

This is running on Windows Server 2008 (64 bit). I'm running Splunk 4.1.6.

Here's my server.conf in $SPLUNK_HOME\etc\system\local\server.conf. I restarted Splunk after modifying this file.

[general]

serverName = #removed#

allowRemoteLogin = never

[sslConfig]

sslKeysfilePassword = #removed#

asked 11 Feb '11, 17:12

dpgrant's gravatar image

dpgrant
132
accept rate: 0%


One Answer:

That only affects login to splunkd the server, not SplunkWeb, the web interface. In order to limit access to SplunkWeb, you should set the server.socket_host setting in web.conf to 127.0.0.1 (or the address of some other local-only interface).

link

answered 11 Feb '11, 18:05

gkanapathy's gravatar image

gkanapathy ♦
32.4k4827
accept rate: 41%

Post your answer
toggle preview

Follow this question

Log In to enable email subscriptions

RSS:

Answers

Answers + Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text](http://url.com/ "Title")
  • image?![alt text](/path/img.jpg "Title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Tags:

Asked: 11 Feb '11, 17:12

Seen: 625 times

Last updated: 11 Feb '11, 18:05

Copyright © 2005-2012 Splunk Inc. All rights reserved.