<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: Splunkweb process on Windows will not start in Security</title>
    <link>https://community.splunk.com/t5/Security/Splunkweb-process-on-Windows-will-not-start/m-p/149446#M4551</link>
    <description>&lt;P&gt;Hi&lt;/P&gt;

&lt;P&gt;There is nothing in the splunkd.log around the time of attempting to restart splunkweb&lt;/P&gt;</description>
    <pubDate>Thu, 13 Feb 2014 16:47:21 GMT</pubDate>
    <dc:creator>corners</dc:creator>
    <dc:date>2014-02-13T16:47:21Z</dc:date>
    <item>
      <title>Splunkweb process on Windows will not start</title>
      <link>https://community.splunk.com/t5/Security/Splunkweb-process-on-Windows-will-not-start/m-p/149444#M4549</link>
      <description>&lt;P&gt;Hi&lt;/P&gt;

&lt;P&gt;I'm hoping someone can help with this issue.&lt;BR /&gt;
In my environment I have a splunk search head/indexer server and a deployment/heavy forwarder server. On both servers the splunkd process is starting up no problem.&lt;BR /&gt;
The splunkweb process however is not restarting.&lt;/P&gt;

&lt;P&gt;The servers are windows 2008, splunk is version splunk-5.0.4-172409-x64-release.msi &lt;/P&gt;

&lt;P&gt;Restarting from the command line gives -&lt;BR /&gt;
C:\Program Files\Splunk\bin&amp;gt;splunk start splunkweb debug&lt;BR /&gt;
        Checking http port [8000]: open&lt;BR /&gt;
Starting splunkweb...&lt;BR /&gt;
Splunkweb: Starting (pid 5260)&lt;/P&gt;

&lt;P&gt;Timed out waiting for splunkweb to start.&lt;/P&gt;

&lt;P&gt;The splunkweb process is visible for a few seconds but then disappears.&lt;/P&gt;

&lt;P&gt;In the windows application event log we have a python service event&lt;/P&gt;

&lt;P&gt;Python could find the service class in the module&lt;/P&gt;

&lt;P&gt;&lt;TYPE&gt;: 'module' object has no attribute 'SplunkwebP&lt;BR /&gt;
ythonService"'&lt;/TYPE&gt;&lt;/P&gt;

&lt;P&gt;In the windows logs system events we have&lt;/P&gt;

&lt;P&gt;The Splunkweb service terminated with service-specific error Incorrect function..&lt;BR /&gt;
eventid 7024&lt;/P&gt;

&lt;P&gt;The web-service.log does not get updated on attempting to restart splunkweb.&lt;/P&gt;

&lt;P&gt;Any help would be great.&lt;BR /&gt;
Thanks&lt;BR /&gt;
Steve&lt;/P&gt;</description>
      <pubDate>Thu, 13 Feb 2014 16:38:55 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Security/Splunkweb-process-on-Windows-will-not-start/m-p/149444#M4549</guid>
      <dc:creator>corners</dc:creator>
      <dc:date>2014-02-13T16:38:55Z</dc:date>
    </item>
    <item>
      <title>Re: Splunkweb process on Windows will not start</title>
      <link>https://community.splunk.com/t5/Security/Splunkweb-process-on-Windows-will-not-start/m-p/149445#M4550</link>
      <description>&lt;P&gt;And what does the splunkd.log say in $SPLUNK_HOME/var/log/splunk/splunkd.log?&lt;/P&gt;</description>
      <pubDate>Thu, 13 Feb 2014 16:43:35 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Security/Splunkweb-process-on-Windows-will-not-start/m-p/149445#M4550</guid>
      <dc:creator>dmaislin_splunk</dc:creator>
      <dc:date>2014-02-13T16:43:35Z</dc:date>
    </item>
    <item>
      <title>Re: Splunkweb process on Windows will not start</title>
      <link>https://community.splunk.com/t5/Security/Splunkweb-process-on-Windows-will-not-start/m-p/149446#M4551</link>
      <description>&lt;P&gt;Hi&lt;/P&gt;

&lt;P&gt;There is nothing in the splunkd.log around the time of attempting to restart splunkweb&lt;/P&gt;</description>
      <pubDate>Thu, 13 Feb 2014 16:47:21 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Security/Splunkweb-process-on-Windows-will-not-start/m-p/149446#M4551</guid>
      <dc:creator>corners</dc:creator>
      <dc:date>2014-02-13T16:47:21Z</dc:date>
    </item>
  </channel>
</rss>

