splunk heavy forwarder 500 internal server error when login

[raindrop18]

Hello,

when I try to login to splunk heavy forwarder through UI to install splunk apps, I am getting "500 Internal Server Error" when I do "http://myserver:8000" the UI is coming up but once I am try to login getting the error, any suggestion to fix this?

thanks

[gcusello]

Hi raindrop18,
without access to your system, the only suggest is to verify the usual access problems:

1. hostname,
2. open ports (see internal and external firewalls);
3. enabled web interface.

You can verify the first one using CLI at the end of the Splunk boot.
For the second one, use telnet from your pc to the Splunk Heavy Forwarder telnet myserver 8000 to verify if there is a firewall problem.
For the third one, see in $SPLUNK_HOME/etc/system/local/web.conf if startwebserver is equal to 1 (0 is disabled).

Otherwise, I suggest to open a case to Splunk Support.

Bye.
Giuseppe