# WHATPORT(8089)

## NAME

port 8089 — Splunk management port (splunkd) — Splunk's management and REST port — the admin plane, not the web UI.

Protocol: TCP  
IANA registry

## DESCRIPTION

splunkd listens on 8089 for the Splunk REST API and for management traffic between Splunk instances: deployment servers pushing apps, search heads talking to indexers, forwarders being managed. Splunk's own documentation gives 8089 as the default management/administration port. It speaks HTTPS with a self-signed certificate out of the box, and it is a separate port from Splunk Web on 8000 and from receiving on 9997. IANA leaves 8089 Unassigned.

## EXPOSURE

**Do not expose.** This is the administrative API for the whole Splunk deployment; restrict it to management networks and replace the shipped default certificates.

## CHECK

```sh
curl -sk --max-time 5 https://TARGET:8089/services/server/info
```

## SEE ALSO

- docs — [splunk-ansible — SPLUNK_SVC_PORT, Splunk management port (default 8089)](https://splunk.github.io/splunk-ansible/ADVANCED.html) (splunk.github.io)
- iana — [IANA Service Name and Transport Protocol Port Number Registry — 8089](https://www.iana.org/assignments/service-names-port-numbers/service-names-port-numbers.xhtml?search=8089) (iana.org)

---

HTML: <https://whatport.net/8089/> · JSON: <https://whatport.net/8089.json> · full dataset: <https://whatport.net/ports.json>