We are facing an issue in in SH WEB. Sometimes, the web UI automatically goes down, but at the same time, we have checked the backed server and DMC console.In both locations we have status=up.
After some time it comes up automatically. Do we have any solution or recommendation for this issue ?
Please accept the answer if it was helpful
check your splunkd.log and web_service.log in /var/log/splunk
While facing this issue you can check the status of splunk to see if splunkweb is still running,
run ./splunk status splunkweb in $SPLUNK_HOME/splunk/bin
./splunk status splunkweb