Ways to access Splunk
This documentation does not apply to the most recent version of Splunk. Click here for the latest version.
Ways to access Splunk
This topic discusses the different ways in which you can connect to and use Splunk.
Splunk Web is Splunk's dynamic and interactive graphical user interface. Accessed via a Web browser, Splunk Web is the primary interface used to search and investigate, report on results, and manage one or more Splunk deployment. For our list of supported operating systems and browsers, see the "System requirements" in the Installation manual.
Launch Splunk Web in a browserAfter you install and start Splunk, launch a Web browser and navigate to:
Use whatever host and HTTP port you chose during installation. The HTTP port defaults to 8000 if not otherwise specified.
The first time you log in to Splunk with an Enterprise license, use username
admin and password
changeme. Splunk with a free license does not have access controls.
Note: Starting in Splunk version 4.1.4, you cannot access Splunk Free from a remote browser until you have edited
$SPLUNK_HOME/etc/local/server.conf and set
Always. If you are running Splunk Enterprise, remote login is disabled by default (set to
requireSetPassword) for the admin user until you have changed the default password.
Splunk apps in Splunk Web
When you first launch Splunk Web, you're looking at an app. For most users, this will be the core Search app. Others may see platform-specific apps, with dashboards and views for use with the OS. When you're using Splunk, you're using an app at all times; the dashboards and views available to you depend on the app you're currently using. For more information about Splunk and apps, see the "Splunk apps" topic in this chapter.
Splunk management pages
Whatever app you're in when you launch Splunk, you'll see at least two links in the upper right corner of the screen: Manager and Jobs.
The Manager link takes you to configuration and management pages for your Splunk system and apps. For more information about Splunk Manager, see [coming soon!].
The Jobs link opens the Job Manager window, which allows you to manage all search jobs, both completed and currently running. For more information about job management, see "Supervise your search jobs" in the Capture Knowledge chapter of this manual.
Splunk users can perform much of the core Splunk tasks directly from a commandline interface (CLI). These tasks include: managing inputs and indexes, searching, saving and scheduling searches as alerts, and exporting search results. If you don't have access to the CLI, you should communicate with your Splunk admin. For more information, see "About the CLI" in the Admin manual.
This documentation applies to the following versions of Splunk: 4.1 , 4.1.1 , 4.1.2 , 4.1.3 , 4.1.4 , 4.1.5 , 4.1.6 , 4.1.7 , 4.1.8 , 4.2 , 4.2.1 , 4.2.2 , 4.2.3 , 4.2.4 , 4.2.5 , 4.3 , 4.3.1 , 4.3.2 , 4.3.3 , 4.3.4 , 4.3.5 , 4.3.6