Deployment Architecture

Why is Splunk's web search not working but back end service is running?

rohitvjoshi
Path Finder

Hi Splunkers,

We are facing an issue in in SH WEB. Sometimes, the web UI automatically goes down, but at the same time, we have checked the backed server and DMC console.In both locations we have status=up.

After some time it comes up automatically. Do we have any solution or recommendation for this issue ?

Thanks

RJ

0 Karma

dkeck
Influencer

Please accept the answer if it was helpful

0 Karma

dkeck
Influencer

Hi,

check your splunkd.log and web_service.log in /var/log/splunk

While facing this issue you can check the status of splunk to see if splunkweb is still running,

run ./splunk status splunkweb in $SPLUNK_HOME/splunk/bin

0 Karma
Get Updates on the Splunk Community!

Enterprise Security Content Updates (ESCU) - New Releases

In the last month, the Splunk Threat Research Team (STRT) has had 3 releases of new content via the Enterprise ...

Thought Leaders are Validating Your Hard Work and Training Rigor

As a Splunk enthusiast and member of the Splunk Community, you are one of thousands who recognize the value of ...

.conf23 Registration is Now Open!

Time to toss the .conf-etti 🎉 —  .conf23 registration is open!   Join us in Las Vegas July 17-20 for ...