Splunk® Enterprise

Search Tutorial

Download manual as PDF

This documentation does not apply to the most recent version of Splunk. Click here for the latest version.
Download topic as PDF

Launch Splunk Web

After you download and install the software, you must start Splunk Enterprise and launch Splunk Web.

Start Splunk Enterprise on Linux

After you install Splunk Enterprise, use the Splunk CLI to start Splunk Enterprise.

Prerequisite
You need to understand how to access the CLI. See About the CLI in the Admin Manual.

Steps

  1. Simplify the CLI access by adding a SPLUNK_HOME environment variable for the top-level installation directory, and adding $SPLUNK_HOME/bin to your shell's path.
    If you installed in the default location for Linux, then your export path looks like this:
    # export SPLUNK_HOME=/opt/splunk
    # export PATH=$SPLUNK_HOME/bin:$PATH
    


    If you installed in another location, use that path for the SPLUNK_HOME environment variable.

  2. In the CLI, to start Splunk Enterprise type $SPLUNK_HOME/bin/splunk start
  3. Accept the Splunk Enterprise license.
    After you run the start command, Splunk Enterprise displays the license agreement and prompts you to accept the license before the startup sequence continues.

    Troubleshooting: If you have problems starting Splunk Enterprise, see Start Splunk Enterprise for the first time in the Installation Manual.
  4. Now login to Splunk Web.

Useful CLI commands

If you need to stop, restart, or check the status of your Splunk Enterprise server, use these CLI commands:

$ splunk stop
$ splunk restart
$ splunk status

Start Splunk Enterprise on Windows

After the Windows installation finishes, Splunk Enterprise starts and opens Splunk Web in your browser.

If Splunk Enterprise does not start, use one of the following options to start it.

  • Start Splunk Enterprise from the Start menu.
  • Use the Windows Services Manager to start Splunk Enterprise.
  • Open a cmd window, go to \Program Files\Splunk\bin, and type splunk start.

Now login to Splunk Web.

Start Splunk Enterprise on Mac OS X

In Mac OS X, you can start Splunk Enterprise from your desktop.

  1. Double-click the Splunk icon on your desktop.
  2. The first time you run the helper application, it notifies you that it needs to perform an initialization. Click OK. Splunk Enterprise initializes and sets up the Trial license.
  3. In the Splunk's Little Helper window, select Start and Show Splunk. This option starts Splunk Enterprise and directs your web browser to open a page to Splunk Web. You can also use the Splunk's Little Helper application to stop Splunk Enterprise.
  4. Now login to Splunk Web.

Login to Splunk Web

Splunk Web runs by default on port 8000 of the host on which it is installed. If you use Splunk Enterprise on your local machine, the URL to access Splunk Web is http://localhost:8000.

When you launch Splunk Enterprise for the first time, this login screen appears.

  1. Login using the username admin and the password that you specified when you installed Splunk Enterprise.
  2. This screen image shows the first time login page for Splunk Enterprise.
  3. The Help us improve Splunk software window appears. Read each of the types of usage collection and click OK or Skip.

The first page you see is Splunk Home.

Next step

You have downloaded the tutorial data files and installed Splunk Enterprise.

Continue to Navigating Splunk Web.

PREVIOUS
Install Splunk Enterprise
  NEXT
Navigating Splunk Web

This documentation applies to the following versions of Splunk® Enterprise: 7.1.0, 7.1.1, 7.1.2, 7.1.3, 7.1.4, 7.1.5, 7.1.6, 7.1.7, 7.1.8, 7.1.9, 7.2.0, 7.2.1, 7.2.2, 7.2.3, 7.2.4, 7.2.5, 7.2.6, 7.2.7, 7.2.8, 7.2.9


Comments

Hello Rgchandrasekaran
There are 2 things that could be happening here:

1) Splunk Enterprise attempts to run on port 8000, if that port is already allocated to something else, then you need to configure Splunk Enterprise to run on a different port, such as 8001.

2) There might be a problem with permissions.

This post on Splunk Answers has more information on how to resolve this problem. Please see: https://answers.splunk.com/answers/256785/why-am-i-getting-http-error-404-the-requested-reso.html

Lstewart splunk, Splunker
April 29, 2019

when i first try to open splunk enterprise, i get "HTTP Error 404. The requested resource is not found." how can we solve it?

Rgchandrasekaran
April 29, 2019

Was this documentation topic helpful?

Enter your email address, and someone from the documentation team will respond to you:

Please provide your comments here. Ask a question or make a suggestion.

You must be logged into splunk.com in order to post comments. Log in now.

Please try to keep this discussion focused on the content covered in this documentation topic. If you have a more general question about Splunk functionality or are experiencing a difficulty with Splunk, consider posting a question to Splunkbase Answers.

0 out of 1000 Characters