Deployment Architecture

Deploying an app causes splunkweb.exe on deploy client to switch on. How to stop this?

Ant1D
Motivator

Hey,

Whenever I deploy application App_1 across my Indexers, the application deploys successfully however the splunkweb.exe service on each of these servers is switched back on. As these servers are used for indexing only, the splunkweb.exe service does not need to run on these servers.

Is there an attribute in my config below (taken from serverclass.conf) that can be used to prevent the splunkweb.exe service from starting each time a deployment is executed? restartSplunkWeb=false does not seem to achieve this.

[serverClass:All-Configs]
whitelist.0 = Indexer*

[serverClass:All-Configs:app:App_1]
stateOnClient=enabled
restartSplunkd=true
restartSplunkWeb=false

Thanks in advance for your help.

0 Karma
1 Solution

Ayn
Legend

splunkweb is turned off by setting the following in web.conf:

[settings]
startwebserver = 0

View solution in original post

0 Karma

Ayn
Legend

splunkweb is turned off by setting the following in web.conf:

[settings]
startwebserver = 0
0 Karma

Ant1D
Motivator

Hi Ayn, if I add this to web.conf and then try to run splunk restart splunkweb or splunk start splunkweb in the CLI will these commands turn splunkweb on OR will this setting in web.conf override any attempts to turn on splunkweb? Thanks

0 Karma
Get Updates on the Splunk Community!

Splunk Decoded: Service Maps vs Service Analyzer Tree View vs Flow Maps

It’s Monday morning, and your phone is buzzing with alert escalations – your customer-facing portal is running ...

What’s New in Splunk Observability – September 2025

What's NewWe are excited to announce the latest enhancements to Splunk Observability, designed to help ITOps ...

Fun with Regular Expression - multiples of nine

Fun with Regular Expression - multiples of nineThis challenge was first posted on Slack #regex channel ...