How to restart a splunk on windows through Command Prompt and control panel?

[surbhiQA]

How to restart a splunk on windows through Command Prompt and control panel?

[kamlesh_vaghela · Accepted solution]

Hi Surbhi,

You can start and stop Splunk on Windows in one of the following ways:

1. Start and stop Splunk Enterprise processes via the Windows Services control panel (accessible from Start -> Control Panel -> Administrative Tools -> Services)

    Server daemon and Web interface: splunkd
    Web interface (in legacy mode only): splunkweb. In normal operation, this service starts, then immediately quits when it receives a start request.

2. Start and stop Splunk Enterprise services from a command prompt by using the NET START <service> or NET STOP <service> commands:

    Server daemon and Web interface: splunkd
    Web interface (in legacy mode only): splunkweb. In normal operation, this service starts, then immediately quits when it receives a start request.

3. Start, stop, or restart both processes at once by going to %SPLUNK_HOME%\bin and typing

> splunk [start|stop|restart] 

Please check below URL:

http://docs.splunk.com/Documentation/Splunk/7.0.3/Admin/StartSplunk#Start_Splunk_Enterprise_on_Windo...

[miteshvohra]

Assuming you have installed Splunk Enterprise in the default location ("C:\Program Files\Splunk"), which is also known as $SPLUNK_HOME path:

1. Open Command Prompt
2. Navigate to $SPLUNK_HOME\bin folder
3. Issue the command splunk start and wait for the application to start.

Normally, Splunk Enterprise setup would create a service (should be listed in Services.msc console) and set it to start Automatically at OS boot.

Another 'legacy' service would be in 'Manual' mode and is not necessary to be started for Splunk to run properly. This service status can be safely ignored.

Look forward to your comments/feedback/vote.

Rgds, Mitesh.

[FrankVl]

Assuming you have Splunk running as a service, that would be:
net stop [service name] to stop it and net start [service name] to start it. For restart: net stop [service name] && net start [service name]

Service name will be either splunkd (for full splunk enterprise install / Heavy Forwarder) or splunkforwarder for a universal forwarder.

Or through the Services GUI (services.msc).