8089
Splunk Management
High RiskTCP — System & Infrastructure
Port Overview
Port Number
8089
Service Name
Splunk Management
Transport Protocol
TCP
Category
System & Infrastructure
Security Risk
High
Port Range
Registered (1024-49151)
What is Port 8089?
Port 8089 is the management/REST API port for Splunk Enterprise and Splunk Universal Forwarder. Splunk's internal REST API uses this port for communication between Splunk components and for administrative operations via the CLI. This port should be restricted to Splunk management traffic only.
TCP
System & Infrastructure
Commonly Used
Security Considerations
Port 8089 (Splunk Management) is classified as high risk. This port is a common target for automated scanning and brute-force attacks. If you must expose it, restrict access to known IP addresses.
Recommendation: Use firewall rules to whitelist trusted IPs. Enable rate limiting and intrusion detection.