How to make the KV store port 8191 to listen to local IP only

As the title, How to make the KV store port 8191 to listen to local IP only? Or what's the guide line to harden this port. This document only suggest to harden this port, but not the steps. https://docs.splunk.com/Documentation/Splunk/7.2.5/Security/HardenyourKVstoreport