Has anyone else faced this issue? How to reconnect to splunk? I installed the app and restarted splunk upon which I was disconnected from the splunk server and now I cannot log in again.
This sometimes happens when an admin stages a change to Splunk but doesn't restart it. Then somebody else causes a restart and pulls in the other staged change (which perhaps the admin was not ready to implement). In any case, use the CLI and splunk status
to see where you are at. If splunk is running then check web.conf
to see if somebody turned off the web interface. if splunk is not running, do splunk restart
and see what errors are there and fix them.
This sometimes happens when an admin stages a change to Splunk but doesn't restart it. Then somebody else causes a restart and pulls in the other staged change (which perhaps the admin was not ready to implement). In any case, use the CLI and splunk status
to see where you are at. If splunk is running then check web.conf
to see if somebody turned off the web interface. if splunk is not running, do splunk restart
and see what errors are there and fix them.
Check the splunk log for errors:
\opt\splunk\var\log\splunk\splunkd.log
When you try to start SPLUNK from command prompt $SPLUNK_HOME\bin\splunk -start
, are you seeing any error. Refer to the video on looking into Splunk Configuration issues using btool : https://www.youtube.com/watch?v=eE_r3-F6kgM
Following is the documentation on the same:
https://docs.splunk.com/Documentation/Splunk/latest/Troubleshooting/Usebtooltotroubleshootconfigurat...