topic Re: Splunkweb wont start after reboot on RHEL in Security

Splunkweb wont start after reboot on RHEL

phorstap — Thu, 10 Jul 2014 19:59:42 GMT

I am running RHEL 5.10, I am making it a audit box, pretty much the only thing running on it will be splunk. Every time I have to restart the server, splunkweb will not restart. I have it looking at localhost.localdomain and the proper port. Is there some service I am missing in the start up, it not happening in the proper sequence. Because, I can go to the /splunk/bin folder, type ./splunk start. and it will work fine until I have to turn off the server again.

Re: Splunkweb wont start after reboot on RHEL

jordanperks — Thu, 10 Jul 2014 20:17:54 GMT

have you ran splunk enable boot-start?

Re: Splunkweb wont start after reboot on RHEL

phorstap — Thu, 10 Jul 2014 20:32:51 GMT

Nope, I knew it was something simple that I missed, I appreciate it. That solved my issue.

Re: Splunkweb wont start after reboot on RHEL

ppablo — Thu, 10 Jul 2014 21:34:02 GMT

Hi @phorstap

Glad @jordanperks was able to help you find your solution 🙂 Please be sure to accept his answer (clicking on the check mark next to his response) so other people with similar issues will look to this post for help. Thanks!

Patrick

Re: Splunkweb wont start after reboot on RHEL

frmaasdam — Fri, 11 Jul 2014 10:03:35 GMT

Besides the ./splunk enable boot-start [-user splunk]
You can check the results chkconfig --list splunk
On which run level will splunk start or not