splunk heavy forwarder 500 internal server error when login

raindrop18 — Thu, 09 Feb 2017 20:24:45 GMT

Hello,

when I try to login to splunk heavy forwarder through UI to install splunk apps, I am getting "500 Internal Server Error" when I do "http://myserver:8000" the UI is coming up but once I am try to login getting the error, any suggestion to fix this?

thanks

Re: splunk heavy forwarder 500 internal server error when login

gcusello — Fri, 10 Feb 2017 08:22:21 GMT

Hi raindrop18,
without access to your system, the only suggest is to verify the usual access problems:

hostname,
open ports (see internal and external firewalls);
enabled web interface.

You can verify the first one using CLI at the end of the Splunk boot.
For the second one, use telnet from your pc to the Splunk Heavy Forwarder telnet myserver 8000 to verify if there is a firewall problem.
For the third one, see in $SPLUNK_HOME/etc/system/local/web.conf if startwebserver is equal to 1 (0 is disabled).

Otherwise, I suggest to open a case to Splunk Support.

Bye.
Giuseppe

topic splunk heavy forwarder 500 internal server error when login in Getting Data In

splunk heavy forwarder 500 internal server error when login

Re: splunk heavy forwarder 500 internal server error when login