https://community.splunk.com/t5/Getting-Data-In/Splunk-enterprise-webserver-is-stuck/m-p/494015#M99886 <P>Hi,</P> <P>First of all you should not be modifying the files present in $SPLUNK_HOME/etc/system/default location which is shipped by SPLUNK. If you want to modify them, please create a new .conf file in either $SPLUNK_HOME/etc/system/local or $SPLUNK_HOME/etc/apps//local directory with your setting.</P> <P>Please check splunkd.log and see if you are getting any error there. It appears to me you have modified some settings in web.conf file in $SPLUNK_HOME/etc/system/default which might be causing this issue.</P> Wed, 30 Sep 2020 02:30:22 GMT badrinath_itrs 2020-09-30T02:30:22Z https://community.splunk.com/t5/Getting-Data-In/Splunk-enterprise-webserver-is-stuck/m-p/494014#M99885 <P>My splunk enterprise webserver is stuck as below and starting:</P> <PRE><CODE>Splunk&gt; 4TW Checking prerequisites... Checking http port [8000]: open Checking mgmt port [8089]: open Checking appserver port [127.0.0.1:8065]: open Checking kvstore port [8191]: open Checking configuration... Done. Checking critical directories... Done Checking indexes... Validated: _audit _internal _introspection _telemetry _thefishbucket collectd history mail main secure summary unix_summary Done Checking filesystem compatibility... Done Checking conf files for problems... Done Checking default conf files for edits... Validating installed files against hashes from '/opt/splunk/splunk-7.3.0-657388c7a488-linux-2.6-x86_64-manifest' File '/opt/splunk/etc/system/default/alert_actions.conf' changed. File '/opt/splunk/etc/system/default/web.conf' changed. Problems were found, please review your files and move customizations to local All preliminary checks passed. Starting splunk server daemon (splunkd)... Done [ OK ] Waiting for web server at <A href="https://127.0.0.1:8000" target="test_blank">https://127.0.0.1:8000</A> to be available... </CODE></PRE> <P>Can someone help please ?</P> Tue, 08 Oct 2019 17:47:22 GMT https://community.splunk.com/t5/Getting-Data-In/Splunk-enterprise-webserver-is-stuck/m-p/494014#M99885 vchennuri 2019-10-08T17:47:22Z https://community.splunk.com/t5/Getting-Data-In/Splunk-enterprise-webserver-is-stuck/m-p/494015#M99886 <P>Hi,</P> <P>First of all you should not be modifying the files present in $SPLUNK_HOME/etc/system/default location which is shipped by SPLUNK. If you want to modify them, please create a new .conf file in either $SPLUNK_HOME/etc/system/local or $SPLUNK_HOME/etc/apps//local directory with your setting.</P> <P>Please check splunkd.log and see if you are getting any error there. It appears to me you have modified some settings in web.conf file in $SPLUNK_HOME/etc/system/default which might be causing this issue.</P> Wed, 30 Sep 2020 02:30:22 GMT https://community.splunk.com/t5/Getting-Data-In/Splunk-enterprise-webserver-is-stuck/m-p/494015#M99886 badrinath_itrs 2020-09-30T02:30:22Z