Installation

Splunkweb won't start / run on Indexers in the cluster?

Gregski11
Contributor

I have three Splunk ver 9.0.0 on Windows Server 2019 environments completely isolated and I like to run the Web interface even on my Indexers so I have it running just fine on 6 clustered Indexers in Production where it runs as https with our own certificates

I also have it running on http in my home lab also on 3 Indexers in a cluster 

but when I try to run it in our lab on 3 clustered Indexers for the life of me it won't start, I have restered Splunk 900 times and I even tried the Splunk Start Splunkweb and it never does these checks: 

Waiting for web server at https://127.0.0.1:8000 to be available.

 

nor give me the message that the web is running:

The Splunk web interface is at http://MyIndexServer01:8000



Labels (2)
0 Karma

Gregski11
Contributor

that led me to looking inside of all my web.conf files on the server using a cool little utility called EVERYTHING because the Microsoft search stinks

anyway I found some old app in this directory:

C:\Program Files\Splunk\etc\peer-apps

it was called something like Cluster-Base-Config and sure enough it had a web.conf file with this in it:

[settings]

startwebserver = false

so I remmed it out like so and restarted Splunk and all is well now

 

[settings]

#startwebserver = false

 

someday I'll ask you all about his peer-apps sub directory, LOL 

0 Karma

Gregski11
Contributor

may have found a clue in C:\Program Files\Splunk\var\log\splunk\splunkd.log


12-27-2022 21:05:26.720 -0800 INFO UiHttpListener [11452 WebuiStartup] - Web UI disabled in web.conf [settings]; not starting

0 Karma

SanjayReddy
SplunkTrust
SplunkTrust

Hi @Gregski11 

 

$SPLUNK_HOME/etc/system/local/web.conf 

please add follwing in web.conf and restart the splunk

[settings]
startwebserver = 1

 

0 Karma

Gregski11
Contributor

thanks Sanjay I had exactly that in my local\web.conf and it still was not working despite it also being enabled in the default\web.conf so I was pulling my hair out 

0 Karma

SanjayReddy
SplunkTrust
SplunkTrust

Hi @Gregski11 

 

can you run following command from cmd

splunk bin directory


splunk btool web list --debug | findstr startwebserver

Career Survey
First 500 qualified respondents will receive a $20 gift card! Tell us about your professional Splunk journey.

Can’t make it to .conf25? Join us online!

Get Updates on the Splunk Community!

Can’t Make It to Boston? Stream .conf25 and Learn with Haya Husain

Boston may be buzzing this September with Splunk University and .conf25, but you don’t have to pack a bag to ...

Splunk Lantern’s Guide to The Most Popular .conf25 Sessions

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...

Unlock What’s Next: The Splunk Cloud Platform at .conf25

In just a few days, Boston will be buzzing as the Splunk team and thousands of community members come together ...