I have three Splunk ver 9.0.0 on Windows Server 2019 environments completely isolated and I like to run the Web interface even on my Indexers so I have it running just fine on 6 clustered Indexers in Production where it runs as https with our own certificates
I also have it running on http in my home lab also on 3 Indexers in a cluster
but when I try to run it in our lab on 3 clustered Indexers for the life of me it won't start, I have restered Splunk 900 times and I even tried the Splunk Start Splunkweb and it never does these checks:
Waiting for web server at https://127.0.0.1:8000 to be available.
nor give me the message that the web is running:
The Splunk web interface is at http://MyIndexServer01:8000
that led me to looking inside of all my web.conf files on the server using a cool little utility called EVERYTHING because the Microsoft search stinks
anyway I found some old app in this directory:
C:\Program Files\Splunk\etc\peer-apps
it was called something like Cluster-Base-Config and sure enough it had a web.conf file with this in it:
[settings]
startwebserver = false
so I remmed it out like so and restarted Splunk and all is well now
[settings]
#startwebserver = false
someday I'll ask you all about his peer-apps sub directory, LOL
may have found a clue in C:\Program Files\Splunk\var\log\splunk\splunkd.log
12-27-2022 21:05:26.720 -0800 INFO UiHttpListener [11452 WebuiStartup] - Web UI disabled in web.conf [settings]; not starting
Hi @Gregski11
$SPLUNK_HOME/etc/system/local/web.conf
please add follwing in web.conf and restart the splunk
[settings] startwebserver = 1
thanks Sanjay I had exactly that in my local\web.conf and it still was not working despite it also being enabled in the default\web.conf so I was pulling my hair out
Hi @Gregski11
can you run following command from cmd
splunk bin directory
splunk btool web list --debug | findstr startwebserver