About Splunk server settings

About Splunk server settings

Use the Admin > Server pages to view and change the Splunk server settings, restart the Splunk server, and change and reload Splunk's authentication method.

Important: When you change any of the server settings, you must restart Splunk for your changes to take effect.

View server settings

The Admin > Server: View Settings page is divided into three sections: basic settings, Splunk Web settings, and Datastore settings. Refer to Change Splunk server default settings for instructions to change these settings.

Basic settings

Under the Basic Settings heading, you can change your server name and splunkd port.

• The Splunk server name, which is the identity of your Splunk instance, defaults to the DNS or IP address of the Splunk sever host.
• Splunk management port number, though which your Splunk instance communicates with the splunkd daemon, defaults to port 8089.

Note: You cannot modify the installation path.

Splunk Web settings

Under the Splunk Web heading, you can enable or disable Splunk Web, enable SSL (HTTPS) in Splunk Web, and change the Web port.

• By default, Splunk Web is enabled. However, in a distributed environment, you may choose to disable Splunk Web on your forwarding instances.
• By default, SSL is not enabled.
• The default Web port number is 8000.

Datastore settings

Under the Datastore heading, you can change the default host name, the datastore path, and the minimum free disk space.

• By default, your Splunk server name is your Default host name. This name defines the value for the host field in your search results; it tags all events with this host value.
• The datastore location is the top-level directory where the Splunk server stores all indexed data, user information, and working files. By default, this path is set to $SPLUNK_HOME/var/lib/splunk.
• The minimum free disk space is a value that tells Splunk to stop indexing if the storage space reaches this limit (in MB). The default disk space is 2000 MB.

Control server

Use the Admin > Server: Control Server page to restart the Splunk server and reload the Authentication method.

Note: Unless you are running Splunk with an Enterprise license, you will not see the Reload Authentication method option.

Configure authentication method

Use the Admin > Server: Authentication Configuration page to change Splunk's authentication method.

Note: This feature requires an Enterprise license. If you are running Splunk with a Free license, Splunk Web will tell you how to update your license.