I have been running splunk on a server for sometime now and last week it stops responding. I don't know what could be the issue that cause it. When I access the server and go to localhost:8000, the page keeps loading and never give me any message. What can I do now?
Did you try restarting?
Any errors in splunkd.log? Is the server healthy? Try using servername:8000 or serverip:8000 and see if it makes any difference?
I did try to stopped, restarted it but even when it stop, my localhost:8000 still doesn't response. I would expect it to send me something like server's not responding. The server is healthy. There are 2 errors such as: ERROR HttpListener - Exception. I just tried using servername:8000 and serverip:8000 and it still doesn't work.
Has it created a socket on port 8000 yet? Try:
netstat -an | select-string 8000 and see if anything returns that it's listening. If not, do you have anything denying it from creating that socket? Anti-virus, etc?
I tried that command but it said select-string is not recognized as an internal or external command. I have McAfee running but I don't know if that blocking the port. How can I find out?