Splunk® Enterprise

User Manual

Download manual as PDF

Splunk version 4.x reached its End of Life on October 1, 2013. Please see the migration information.
This documentation does not apply to the most recent version of Splunk. Click here for the latest version.
Download topic as PDF

Ways to access Splunk

This topic discusses the different ways in which you can connect to and use Splunk.

Splunk Web

Splunk Web is Splunk's dynamic and interactive graphical user interface. Accessed via a Web browser, Splunk Web is the primary interface used to search and investigate, report on results, and manage one or more Splunk deployment. For our list of supported operating systems and browsers, see the "System requirements" in the Installation manual.

Launch Splunk Web in a browser

After you install and start Splunk, launch a Web browser and navigate to:

Use whatever host and HTTP port you chose during installation. The HTTP port defaults to 8000 if not otherwise specified.

The first time you log in to Splunk with an Enterprise license, use username admin and password changeme. Splunk with a free license does not have access controls.

Note: Starting in Splunk version 4.1.4, you cannot access Splunk Free from a remote browser until you have edited $SPLUNK_HOME/etc/local/server.conf and set allowRemoteLogin to Always. If you are running Splunk Enterprise, remote login is disabled by default (set to requireSetPassword) for the admin user until you have changed the default password.

Splunk apps in Splunk Web

When you first launch Splunk Web, you're looking at an app. For most users, this will be the core Search app. Others may see platform-specific apps, with dashboards and views for use with the OS. When you're using Splunk, you're using an app at all times; the dashboards and views available to you depend on the app you're currently using. For more information about Splunk and apps, see the "Splunk apps" topic in this chapter.

Splunk management pages

Whatever app you're in when you launch Splunk, you'll see at least two links in the upper right corner of the screen: Manager and Jobs.

The Manager link takes you to configuration and management pages for your Splunk system and apps. For more information about Splunk Manager, see [coming soon!].

The Jobs link opens the Job Manager window, which allows you to manage all search jobs, both completed and currently running. For more information about job management, see "Supervise your search jobs" in the Capture Knowledge chapter of this manual.

Splunk CLI

Splunk users can perform much of the core Splunk tasks directly from a commandline interface (CLI). These tasks include: managing inputs and indexes, searching, saving and scheduling searches as alerts, and exporting search results. If you don't have access to the CLI, you should communicate with your Splunk admin. For more information, see "About the CLI" in the Admin manual.

Splunk overview
Splunk apps

This documentation applies to the following versions of Splunk® Enterprise: 4.3, 4.3.1, 4.3.2, 4.3.3, 4.3.4, 4.3.5, 4.3.6, 4.3.7


Remote access to a Windows 7 hosted SplunkWeb: If Windows firewall is enabled it may be necessary to create windows firewall rules to allow port 8000 access.

April 4, 2011

Was this documentation topic helpful?

Enter your email address, and someone from the documentation team will respond to you:

Please provide your comments here. Ask a question or make a suggestion.

You must be logged into splunk.com in order to post comments. Log in now.

Please try to keep this discussion focused on the content covered in this documentation topic. If you have a more general question about Splunk functionality or are experiencing a difficulty with Splunk, consider posting a question to Splunkbase Answers.

0 out of 1000 Characters