Installation

Splunkweb won't start / run on Indexers in the cluster?

Gregski11
Contributor

I have three Splunk ver 9.0.0 on Windows Server 2019 environments completely isolated and I like to run the Web interface even on my Indexers so I have it running just fine on 6 clustered Indexers in Production where it runs as https with our own certificates

I also have it running on http in my home lab also on 3 Indexers in a cluster 

but when I try to run it in our lab on 3 clustered Indexers for the life of me it won't start, I have restered Splunk 900 times and I even tried the Splunk Start Splunkweb and it never does these checks: 

Waiting for web server at https://127.0.0.1:8000 to be available.

 

nor give me the message that the web is running:

The Splunk web interface is at http://MyIndexServer01:8000



Labels (2)
0 Karma

Gregski11
Contributor

that led me to looking inside of all my web.conf files on the server using a cool little utility called EVERYTHING because the Microsoft search stinks

anyway I found some old app in this directory:

C:\Program Files\Splunk\etc\peer-apps

it was called something like Cluster-Base-Config and sure enough it had a web.conf file with this in it:

[settings]

startwebserver = false

so I remmed it out like so and restarted Splunk and all is well now

 

[settings]

#startwebserver = false

 

someday I'll ask you all about his peer-apps sub directory, LOL 

0 Karma

Gregski11
Contributor

may have found a clue in C:\Program Files\Splunk\var\log\splunk\splunkd.log


12-27-2022 21:05:26.720 -0800 INFO UiHttpListener [11452 WebuiStartup] - Web UI disabled in web.conf [settings]; not starting

0 Karma

SanjayReddy
SplunkTrust
SplunkTrust

Hi @Gregski11 

 

$SPLUNK_HOME/etc/system/local/web.conf 

please add follwing in web.conf and restart the splunk

[settings]
startwebserver = 1

 

0 Karma

Gregski11
Contributor

thanks Sanjay I had exactly that in my local\web.conf and it still was not working despite it also being enabled in the default\web.conf so I was pulling my hair out 

0 Karma

SanjayReddy
SplunkTrust
SplunkTrust

Hi @Gregski11 

 

can you run following command from cmd

splunk bin directory


splunk btool web list --debug | findstr startwebserver

0 Karma
Get Updates on the Splunk Community!

.conf24 | Registration Open!

Hello, hello! I come bearing good news: Registration for .conf24 is now open!   conf is Splunk’s rad annual ...

ICYMI - Check out the latest releases of Splunk Edge Processor

Splunk is pleased to announce the latest enhancements to Splunk Edge Processor.  HEC Receiver authorization ...

Introducing the 2024 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...