Error starting Splunkweb Service (HELP!!)

[pstamati]

This error is shown on App Log when I tried to initiate splunkweb service. Splunkd Starts normally.

I'm Running Splunk Version 4.22 over Windows 2003

APP Log Error

The instance's SvcRun() method failed 
  File "C:\Program Files\Splunk\Python-2.6\Lib\site-packages\win32\win32serviceutil.py", line 785, in SvcRun
    self.SvcDoRun()
  File "C:\Program Files\Splunk\bin\SplunkWebService.py", line 37, in SvcDoRun
    subprocess.call(gMakeCertsCmd)
  File "C:\Program Files\Splunk\Python-2.6\Lib\subprocess.py", line 470, in call
    return Popen(*popenargs, **kwargs).wait()
  File "C:\Program Files\Splunk\Python-2.6\Lib\subprocess.py", line 621, in __init__
    errread, errwrite)
  File "C:\Program Files\Splunk\Python-2.6\Lib\subprocess.py", line 830, in _execute_child
    startupinfo) 
<type 'exceptions.WindowsError'>: [Error 193]   File "C:\Program Files\Splunk\Python-2.6\Lib\site-packages\win32\win32serviceutil.py", line 785, in SvcRun
    self.SvcDoRun()
  File "C:\Program Files\Splunk\bin\SplunkWebService.py", line 37, in SvcDoRun
    subprocess.call(gMakeCertsCmd)
  File "C:\Program Files\Splunk\Python-2.6\Lib\subprocess.py", line 470, in call
    return Popen(*popenargs, **kwargs).wait()
  File "C:\Program Files\Splunk\Python-2.6\Lib\subprocess.py", line 621, in __init__
    errread, errwrite)
  File "C:\Program Files\Splunk\Python-2.6\Lib\subprocess.py", line 830, in _execute_child

[cramasta]

I tried that but still no luck.

[cramasta]

Just performed a upgrade from 4.1.5 to 4.2.4 and now SplunkWeb will not start. I am getting the same error message listed above in the event logs.

This is what is listed in my splunk-launch.conf for SPLUNK_HOME file however the line is commented out so not exactly sure what the fix was for other people. I did try removing the end \ and then trying to restart splunk but it did not work. I am running 64 bit 2008R2

# SPLUNK_HOME=C:\Program Files\Splunk\

Any help would be great.

[Paolo_Prigione]

Try to uncomment the line and remove the trailing slash. Then restart.

[las]

I have the same problem on 4.2.4

[Paolo_Prigione]

Update, we were able to install it on the C: drive. On 😧 it never worked.
During install, I modified the

$SPLUNK_HOME\etc\splunk-launch.conf 

specifying the proper $SPLUNK_HOME and removing the trailing \ as per this bug reported in the 4.2.1 release notes.

Splunk Web fails to start if the SPLUNK_HOME path in splunk-launch.conf ends with a directory delimiter ("/" for Linux or "\" for Windows). (SPL-38054)

[Paolo_Prigione]

Update: Splunk 4.2.1 and 4.2.2 show the same problem. Splunk 4.2 does not even complete the installation as Windows reverts it...

[jritscher]

same problem here

[Paolo_Prigione]

I have seen the same problem with Splunk 4.2.1 32bit on a Windows 2k3 32 bit with underlying Intel Xeon CPU