Refine your search:

After I installed Splunk on a (64 AMD debian) Amazon EC2 instance I see this message:

The Splunk web interface is at http://ip-10-12-117-100:8000

The problem is that this IP above 10-12-117-100 is listed by Amazon as the internal or private IP address, so the web service can't be accessed with this IP.

I need Splunk to bind to this public address:

ec2-5X-XX-XXX-XX.compute-1.amazonaws.com

My guess is that there is a configuration file that I need to edit and then I need to restart Splunk?

asked 29 Mar '12, 18:32

boris's gravatar image

boris
1829
accept rate: 40%


One Answer:

Amazon EC2 does not give you a public address on your instance. Instead, it does destination NAT on the public IP to the private IP when the source attempts to access it. It's transparent to your application. If you attempt to use Splunk on port 8000 from the public IP that EC2 has given you, it will work, assuming you've setup the firewall rules properly.

link

answered 29 Mar '12, 22:20

csharp_splunk's gravatar image

csharp_splunk
32216
accept rate: 30%

Correct. I would recommend to force HTTPS for splunkweb as well. To get a friendly URL I recommend setting up DynDNS or similar service.

(30 Mar '12, 12:06) ftk ♦
Post your answer
toggle preview

Follow this question

Log In to enable email subscriptions

RSS:

Answers

Answers + Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text](http://url.com/ "Title")
  • image?![alt text](/path/img.jpg "Title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Tags:

×68
×8
×4

Asked: 29 Mar '12, 18:32

Seen: 496 times

Last updated: 30 Mar '12, 12:06

Copyright © 2005-2012 Splunk Inc. All rights reserved.