Deployment Architecture

Web_service.log is empty after upgrading from Splunk version 7.3 to 8.0.

dolj
Loves-to-Learn Everything

I have just upgraded my Splunk deployment server from 7.3 to 8.0 and after upgrading the web UI will not come up. I was trying to troubleshoot and was looking at the web_service.log but for some reason it is empty (0 bytes). I cannot figure out why it is not getting any logs or why the UI drops after the upgrade. Any suggestions would be greatly appreciated.

Labels (1)
0 Karma

shivanshu1593
Builder

Error messages in Splunkd can help. Also, please check if the certificate that you've specified in web.conf is still valid or not, and the correct path to the certificate is mentioned over there.

Thank you,
Shiv
###If you found the answer helpful, kindly consider upvoting/accepting it as the answer as it helps other Splunkers find the solutions to similar issues###
0 Karma

dolj
Loves-to-Learn Everything

the only thing in ./local/web.conf is

[settings]
startwebserver = 1
~

this is a test DS that I am trying to upgrade before hitting prod.

0 Karma

PavelP
Motivator

Hello @dolj

check splunkd.log for any WARNs or ERRORs directly after the restart

0 Karma

dolj
Loves-to-Learn Everything

checked the splunkd.log while restarting and there were no WARN or ERROR messages only INFO. When you tail the splunkd.log there are not entries written while starting, stopping, or restarting.

0 Karma

PavelP
Motivator

@dolj
no log entries at all during restart - that's unusual. Does splunk process running?

ps aux | grep -i splunk
0 Karma

dolj
Loves-to-Learn Everything

not sure why but it wasn't working and it now is.

I found this log related to the web UI

05-24-2020 23:12:06.172 -0400 ERROR UiHttpListener - An applicaiton server has exited unexpectedly, web UI cannot be used until it is restarted

0 Karma
Get Updates on the Splunk Community!

Registration for Splunk University is Now Open!

Are you ready for an adventure in learning?   Brace yourselves because Splunk University is back, and it's ...

Splunkbase | Splunk Dashboard Examples App for SimpleXML End of Life

The Splunk Dashboard Examples App for SimpleXML will reach end of support on Dec 19, 2024, after which no new ...

Understanding Generative AI Techniques and Their Application in Cybersecurity

Watch On-Demand Artificial intelligence is the talk of the town nowadays, with industries of all kinds ...