https://community.splunk.com/t5/Security/splunkweb-is-not-running/m-p/61949#M2063 <P>Find the reason:<BR /> If i enable SplunkLightForwarder,it will not start Splunk web service<BR /> i modify $SPLUNK_HOME/etc/apps//SplunkLightForwarder/(local|default)/app.conf and set "state = disabled." and restart the splunk service,then it works.</P> <P>Anyone can explain why so?</P> Tue, 29 May 2012 08:00:17 GMT coldface 2012-05-29T08:00:17Z https://community.splunk.com/t5/Security/splunkweb-is-not-running/m-p/61948#M2062 <P>[root@n]# ./splunk status<BR /> splunkd is running (PID: 6024).<BR /> splunk helpers are running (PIDs: 6025).<BR /> splunkweb is not running.</P> <P>I am curious that the check http port will not run while start splunk.<BR /> [root@pptp-cent6 bin]# ./splunk start<BR /> splunkd 6024 was not running.<BR /> Stopping splunk helpers...<BR /> [ OK ]<BR /> Done.<BR /> Stopped helpers.<BR /> Removing stale pid file... done.</P> <P>Splunk&gt; Finding your faults, just like mom.</P> <P>Checking prerequisites...<BR /> Checking mgmt port [8089]: open<BR /> Checking configuration... Done.<BR /> Checking index directory...<BR /> Validated databases: _thefishbucket<BR /> Done<BR /> Success<BR /> Checking conf files for typos...<BR /> All preliminary checks passed.</P> <P>Starting splunk server daemon (splunkd)... <BR /> [ OK ]</P> <P>Bellow is the web_service log information:<BR /> root:133 - ENGINE: Caught signal SIGTERM.<BR /> 2012-05-29 14:38:24,379 INFO [4fc46e648196381ac] root:133 - ENGINE: Bus STOPPING<BR /> 2012-05-29 14:38:24,635 INFO [4fc46e648196381ac] root:133 - ENGINE: HTTP Server cherrypy._cpwsgi_server.CPWSGIServer(('0.0.0.0', 8000)) shut down<BR /> 2012-05-29 14:38:24,649 INFO [4fc46e648196381ac] root:133 - ENGINE: Stopped thread 'Monitor'.<BR /> 2012-05-29 14:38:24,681 INFO [4fc46e648196381ac] root:133 - ENGINE: Stopped thread 'Monitor'.<BR /> 2012-05-29 14:38:24,687 INFO [4fc46e648196381ac] root:133 - ENGINE: Stopped thread '_TimeoutMonitor'.<BR /> 2012-05-29 14:38:24,688 INFO [4fc46e648196381ac] root:133 - ENGINE: Bus STOPPED<BR /> 2012-05-29 14:38:24,688 INFO [4fc46e648196381ac] root:133 - ENGINE: Bus EXITING<BR /> 2012-05-29 14:38:24,688 INFO [4fc46e648196381ac] root:133 - ENGINE: Bus EXITED<BR /> 2012-05-29 14:38:24,689 INFO [4fc46e648196381ac] root:133 - ENGINE: Waiting for child threads to terminate...</P> <P>Can someone tell me how to troubleshoot?</P> Mon, 28 Sep 2020 11:52:27 GMT https://community.splunk.com/t5/Security/splunkweb-is-not-running/m-p/61948#M2062 coldface 2020-09-28T11:52:27Z https://community.splunk.com/t5/Security/splunkweb-is-not-running/m-p/61949#M2063 <P>Find the reason:<BR /> If i enable SplunkLightForwarder,it will not start Splunk web service<BR /> i modify $SPLUNK_HOME/etc/apps//SplunkLightForwarder/(local|default)/app.conf and set "state = disabled." and restart the splunk service,then it works.</P> <P>Anyone can explain why so?</P> Tue, 29 May 2012 08:00:17 GMT https://community.splunk.com/t5/Security/splunkweb-is-not-running/m-p/61949#M2063 coldface 2012-05-29T08:00:17Z https://community.splunk.com/t5/Security/splunkweb-is-not-running/m-p/61950#M2064 <P>If Splunk Light Forwarder is enabled, Splunk Web is automatically disabled.<BR /> See documentation.</P> Wed, 28 Nov 2012 08:31:30 GMT https://community.splunk.com/t5/Security/splunkweb-is-not-running/m-p/61950#M2064 davidozvaldic 2012-11-28T08:31:30Z https://community.splunk.com/t5/Security/splunkweb-is-not-running/m-p/61951#M2065 <P>Because thats what a light forwarder is, as above, go read the documentation!<BR /> <A href="http://docs.splunk.com/Documentation/Splunk/5.0/Deploy/Typesofforwarders">http://docs.splunk.com/Documentation/Splunk/5.0/Deploy/Typesofforwarders</A></P> Wed, 28 Nov 2012 08:59:55 GMT https://community.splunk.com/t5/Security/splunkweb-is-not-running/m-p/61951#M2065 Drainy 2012-11-28T08:59:55Z