Deployment Architecture

Why is Splunk's web search not working but back end service is running?

rohitvjoshi
Path Finder

Hi Splunkers,

We are facing an issue in in SH WEB. Sometimes, the web UI automatically goes down, but at the same time, we have checked the backed server and DMC console.In both locations we have status=up.

After some time it comes up automatically. Do we have any solution or recommendation for this issue ?

Thanks

RJ

0 Karma

dkeck
Influencer

Please accept the answer if it was helpful

0 Karma

dkeck
Influencer

Hi,

check your splunkd.log and web_service.log in /var/log/splunk

While facing this issue you can check the status of splunk to see if splunkweb is still running,

run ./splunk status splunkweb in $SPLUNK_HOME/splunk/bin

0 Karma
Get Updates on the Splunk Community!

The Splunk Success Framework: Your Guide to Successful Splunk Implementations

Splunk Lantern is a customer success center that provides advice from Splunk experts on valuable data ...

Splunk Training for All: Meet Aspiring Cybersecurity Analyst, Marc Alicea

Splunk Education believes in the value of training and certification in today’s rapidly-changing data-driven ...

Investigate Security and Threat Detection with VirusTotal and Splunk Integration

As security threats and their complexities surge, security analysts deal with increased challenges and ...