Deployment Architecture

Startwebserver 0

Laurence
Engager

When I start Splunk after a reboot of the server splunk is running fine but the webserver is not starting.

./splunk cmd btool web list --debug |grep startwebserver
/opt/splunk/etc/apps/SplunkLightForwarder/default/web.conf startwebserver = 0

Is there a way to manualy start the webserver? I run Ubuntu

Thanks,
Laurence

Labels (2)
0 Karma
1 Solution

badrinath_itrs
Communicator

If this enterprise SPLUNK installation , it should be enabled in web.conf in $SPLUNK_HOME/etc/system/default.

You can try adding below settings in $SPLUNK_HOME/etc/system/local/web.conf

[settings]
startwebserver = 1

 

View solution in original post

0 Karma

badrinath_itrs
Communicator

The Webserver gets restarted automatically if that is enabled as startwebserver =1 in web.conf.

Can you check if you have a file in $SPLUNK_HOME/etc/system/local/web.conf that disable the webserver ? if not create a file and enable the settings ? 

0 Karma

Laurence
Engager

The file web.conf isn't there. Also I dont realy know what to put in the file when I create it.

0 Karma

Laurence
Engager

I got it fixed, found the settings for the file in the splunk documentation. Thank you for you help.

0 Karma

isoutamo
SplunkTrust
SplunkTrust
BTW, if this is a peer in indexer cluster or heavy forwarder then it's best practice to keep web GUI down for security reasons.
https://docs.splunk.com/Documentation/Splunk/8.2.3/Security/WhatyoucansecurewithSplunk

badrinath_itrs
Communicator

If this enterprise SPLUNK installation , it should be enabled in web.conf in $SPLUNK_HOME/etc/system/default.

You can try adding below settings in $SPLUNK_HOME/etc/system/local/web.conf

[settings]
startwebserver = 1

 

0 Karma
Get Updates on the Splunk Community!

Improve Your Security Posture

Watch NowImprove Your Security PostureCustomers are at the center of everything we do at Splunk and security ...

Maximize the Value from Microsoft Defender with Splunk

 Watch NowJoin Splunk and Sens Consulting for this Security Edition Tech TalkWho should attend:  Security ...

This Week's Community Digest - Splunk Community Happenings [6.27.22]

Get the latest news and updates from the Splunk Community here! News From Splunk Answers ✍️ Splunk Answers is ...