This is more common with smaller implementations, but in some cases a splunk instance might be running on a multi-homed \ multi-IP box. Say you have several web pages or another application on the same box. Maybe you have some management tools for the box loading that take up a specific IP. If there is a conflict, you may need to bind Splunk to a specific IP.
This can be accomplished by editting $SPLUNK_HOME/etc/splunk-launch.conf.
Add
SPLUNK_BINDIP = XXX.XXX.XXX.XXX
Where XXX.XXX.XXX.XXX is the IP address to bind to. The only requirement is that it has to be an IP local to the box.
Category:
—
GuardianMS
Guarding your IT Experience!
Add new comment