Installation
Highlighted

Error starting splunkweb after upgrade to 5.0 (Ubuntu)

Explorer

Having followed the Upgrade to 5.0 on Unix article, I'm unable to fully start splunk. The splunk daemons start fine but I get a "Error starting splunkweb" error message at the end of the startup process. Not sure what happened during the install/upgrade process.

/opt/splunk# service splunk start
Starting Splunk...

Splunk> CSI: Logfiles.

Checking prerequisites...
    Checking http port [80]: open
    Checking mgmt port [8089]: open
    Checking configuration...  Done.
    Checking indexes...
        Validated databases: _audit _blocksignature _internal _thefishbucket asset_discovery automation history main msad netflow_si_traffic os perfmon splunk_monitoring summary summary_postfix winevents
    Done
    Checking filesystem compatibility...  Done
    Checking conf files for typos...    Done
All preliminary checks passed.

Starting splunk server daemon (splunkd)...  Done

Starting splunkweb...  Error starting splunkweb.

Poking around in various log files, I receive the following messages in web_service.log

2012-10-30 17:07:35,812 INFO    [50905db7b21112610] __init__:161 - Using default logging config file: /opt/splunk/etc/log.cfg
2012-10-30 17:07:35,813 INFO    [50905db7b21112610] __init__:177 - Setting logger=splunk level=INFO
2012-10-30 17:07:35,813 INFO    [50905db7b21112610] __init__:177 - Setting logger=splunk.appserver level=INFO
2012-10-30 17:07:35,813 INFO    [50905db7b21112610] __init__:177 - Setting logger=splunk.appserver.controllers level=INFO
2012-10-30 17:07:35,813 INFO    [50905db7b21112610] __init__:177 - Setting logger=splunk.appserver.lib level=WARN
2012-10-30 17:07:36,106 ERROR   [50905db7b21112610] root:554 - Unable to start splunkweb
2012-10-30 17:07:36,106 ERROR   [50905db7b21112610] root:555 - [Errno 2] No such file or directory: '/opt/splunk/etc/apps/Splunk_TA_windows/appserver/modules/Windows_IFrame'
Traceback (most recent call last):
  File "/opt/splunk/lib/python2.7/site-packages/splunk/appserver/mrsparkle/root.py", line 106, in <module>
    from controllers.top import *
  File "/opt/splunk/lib/python2.7/site-packages/splunk/appserver/mrsparkle/controllers/top.py", line 13, in <module>
    from admin import AdminController
  File "/opt/splunk/lib/python2.7/site-packages/splunk/appserver/mrsparkle/controllers/admin.py", line 17, in <module>
    from splunk.appserver.mrsparkle.controllers.appinstall import AppInstallController
  File "/opt/splunk/lib/python2.7/site-packages/splunk/appserver/mrsparkle/controllers/appinstall.py", line 9, in <module>
    from splunk.appserver.mrsparkle.lib import cached, module
  File "/opt/splunk/lib/python2.7/site-packages/splunk/appserver/mrsparkle/lib/module.py", line 460, in <module>
    moduleMapper = ModuleMapper()
  File "/opt/splunk/lib/python2.7/site-packages/splunk/appserver/mrsparkle/lib/module.py", line 79, in __init__
    self.installedModules = self.getInstalledModules()
  File "/opt/splunk/lib/python2.7/site-packages/splunk/appserver/mrsparkle/lib/module.py", line 24, in helper
    return f(*a, **kw)
  File "/opt/splunk/lib/python2.7/site-packages/splunk/appserver/mrsparkle/lib/module.py", line 443, in getInstalledModules
    mods = self.getModuleList(root)
  File "/opt/splunk/lib/python2.7/site-packages/splunk/appserver/mrsparkle/lib/module.py", line 33, in helper
    return f(*a, **kw)
  File "/opt/splunk/lib/python2.7/site-packages/splunk/appserver/mrsparkle/lib/module.py", line 212, in getModuleList
    for filename in os.listdir(module_path):
OSError: [Errno 2] No such file or directory: '/opt/splunk/etc/apps/Splunk_TA_windows/appserver/modules/Windows_IFrame'

ls /opt/splunk/etc/apps/SplunkTAwindows/appserver/modules

TAWindowsFTR TAWindowsIFrame

Tags (2)
Highlighted

Re: Error starting splunkweb after upgrade to 5.0 (Ubuntu)

Influencer

Why is Splunk trying to check TCP/80?

0 Karma
Highlighted

Re: Error starting splunkweb after upgrade to 5.0 (Ubuntu)

Splunk Employee
Splunk Employee

Please open a support ticket and explain the steps you took which got you to this error when you submit the ticket.

http://www.splunk.com/support

0 Karma
Highlighted

Re: Error starting splunkweb after upgrade to 5.0 (Ubuntu)

Explorer

You may want to check the JAVA requirements for Windows TA and Splunk for AD if you are using it. I ran into this problem before upgrading, while setting up Windows and AD components.

0 Karma