<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic IndexProcessor - &amp;quot;Waiting for HTTPServer to start&amp;quot; when using config files to create token in Getting Data In</title>
    <link>https://community.splunk.com/t5/Getting-Data-In/IndexProcessor-quot-Waiting-for-HTTPServer-to-start-quot-when/m-p/364384#M66356</link>
    <description>&lt;P&gt;Hi,&lt;/P&gt;

&lt;P&gt;I'm running splunk in a distributed environment and the web console for creating HEC tokens presented various issues that lead me to creating them using config files as per the documentation. However with my new token configuration (it's fine without it) the splunk service will not start and the last log found in &lt;CODE&gt;$SPLUNK_HOME/var/log/splunk/splunkd.log&lt;/CODE&gt; is: &lt;/P&gt;

&lt;P&gt;INFO  IndexProcessor - initClustering (peer): Waiting for HTTPServer to start...&lt;/P&gt;

&lt;P&gt;here is the config I added in &lt;CODE&gt;$SPLUNK_HOME/etc/apps/splunk_httpinput/local/inputs.conf&lt;/CODE&gt;:&lt;/P&gt;

&lt;PRE&gt;&lt;CODE&gt;[http://&amp;lt;token_name&amp;gt;]
description = ...
disabled = 0
index = &amp;lt;index_name&amp;gt;
sourcetype = ...
token = &amp;lt;token_value&amp;gt;
&lt;/CODE&gt;&lt;/PRE&gt;

&lt;P&gt;I'll note that the index name I used isn't actually an existing index, and I realise I'll have to configure the index before using it but even with that line commented out, I get the same issue.&lt;/P&gt;

&lt;P&gt;Any help would be greatly appreciated and of course, I'd be happy to help out with more info wherever needed.&lt;/P&gt;

&lt;P&gt;Thanks&lt;/P&gt;</description>
    <pubDate>Mon, 12 Feb 2018 03:39:03 GMT</pubDate>
    <dc:creator>packland</dc:creator>
    <dc:date>2018-02-12T03:39:03Z</dc:date>
    <item>
      <title>IndexProcessor - "Waiting for HTTPServer to start" when using config files to create token</title>
      <link>https://community.splunk.com/t5/Getting-Data-In/IndexProcessor-quot-Waiting-for-HTTPServer-to-start-quot-when/m-p/364384#M66356</link>
      <description>&lt;P&gt;Hi,&lt;/P&gt;

&lt;P&gt;I'm running splunk in a distributed environment and the web console for creating HEC tokens presented various issues that lead me to creating them using config files as per the documentation. However with my new token configuration (it's fine without it) the splunk service will not start and the last log found in &lt;CODE&gt;$SPLUNK_HOME/var/log/splunk/splunkd.log&lt;/CODE&gt; is: &lt;/P&gt;

&lt;P&gt;INFO  IndexProcessor - initClustering (peer): Waiting for HTTPServer to start...&lt;/P&gt;

&lt;P&gt;here is the config I added in &lt;CODE&gt;$SPLUNK_HOME/etc/apps/splunk_httpinput/local/inputs.conf&lt;/CODE&gt;:&lt;/P&gt;

&lt;PRE&gt;&lt;CODE&gt;[http://&amp;lt;token_name&amp;gt;]
description = ...
disabled = 0
index = &amp;lt;index_name&amp;gt;
sourcetype = ...
token = &amp;lt;token_value&amp;gt;
&lt;/CODE&gt;&lt;/PRE&gt;

&lt;P&gt;I'll note that the index name I used isn't actually an existing index, and I realise I'll have to configure the index before using it but even with that line commented out, I get the same issue.&lt;/P&gt;

&lt;P&gt;Any help would be greatly appreciated and of course, I'd be happy to help out with more info wherever needed.&lt;/P&gt;

&lt;P&gt;Thanks&lt;/P&gt;</description>
      <pubDate>Mon, 12 Feb 2018 03:39:03 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Getting-Data-In/IndexProcessor-quot-Waiting-for-HTTPServer-to-start-quot-when/m-p/364384#M66356</guid>
      <dc:creator>packland</dc:creator>
      <dc:date>2018-02-12T03:39:03Z</dc:date>
    </item>
  </channel>
</rss>

