topic Re: Splunk Web Interface in Splunk Enterprise

Splunk Web Interface

mariamathewtel — Mon, 15 Jun 2020 13:46:10 GMT

Hi, I am trying to access Splunk web. Enabled web server.

Splunkd & splunk webserver both are running. Configured web.conf file in local folder with httpport as 8000 and the port is listening.

While trying to access the web interface using the host name it is giving error as "This site can’t be reached". While trying to access via IP address getting error as "Network Error (tcp_error) A communication error occurred: "Operation timed out" The Web Server may be down, too busy, or experiencing other problems preventing it from responding to requests. You may wish to try again at a later time.".

Can someone please help to fix this.

Re: Splunk Web Interface

gcusello — Mon, 15 Jun 2020 14:11:20 GMT

hi @mariamathewtel ,

did you checked the local firewalls or iptables?

Check the route using telnet.

Ciao.

Giuseppe

Re: Splunk Web Interface

anilchaithu — Mon, 15 Jun 2020 14:26:02 GMT

@mariamathewtel

Please do splunkd restart from CLI and wait whether web service comes up OR not (on the same CLI screen). If the service is up use the same URL to login.

Re: Splunk Web Interface

mariamathewtel — Tue, 16 Jun 2020 05:38:54 GMT

hi @gcusello ,

Thanks for the reply. I am trying to connect within a single network and no firewall is blocking there.

Telnet is connecting.

Re: Splunk Web Interface

mariamathewtel — Tue, 16 Jun 2020 05:41:08 GMT

Hi @anilchaithu ,

Restarted lready and the services are up and running. URL is also displaying. But not able to access it.

Re: Splunk Web Interface

gcusello — Tue, 16 Jun 2020 06:34:19 GMT

Hi @mariamathewtel ,

I was speaking about local firewall (as iptables), anyway, if telnet is connecting on port 8000 there isn't this problem.

Use the check suggested by @anilchaithu to see at startup if there's any problem.

If you continue to have problems, open a case to Splunk Support.

Ciao.

Giuseppe

Re: Splunk Web Interface

gcusello — Tue, 16 Jun 2020 06:39:40 GMT

Hi @mariamathewtel ,

check if the solution described in this answer could solve your problem.

https://community.splunk.com/t5/Installation/Splunk-Enterprise-8-0-4-1-can-t-enter-Splunk-Web-after-changing/m-p/504510#M6368

Ciao.

Giuseppe

Re: Splunk Web Interface

anilchaithu — Tue, 16 Jun 2020 15:19:24 GMT

@mariamathewtel

Please check for errors in internal web logs located here /opt/splunk/var/log/splunk/

web_service.log

web_access.log

also try with both http & https.