Installation

Splunkweb won't start / run on Indexers in the cluster?

Gregski11
Contributor

I have three Splunk ver 9.0.0 on Windows Server 2019 environments completely isolated and I like to run the Web interface even on my Indexers so I have it running just fine on 6 clustered Indexers in Production where it runs as https with our own certificates

I also have it running on http in my home lab also on 3 Indexers in a cluster 

but when I try to run it in our lab on 3 clustered Indexers for the life of me it won't start, I have restered Splunk 900 times and I even tried the Splunk Start Splunkweb and it never does these checks: 

Waiting for web server at https://127.0.0.1:8000 to be available.

 

nor give me the message that the web is running:

The Splunk web interface is at http://MyIndexServer01:8000



Labels (2)
0 Karma

Gregski11
Contributor

that led me to looking inside of all my web.conf files on the server using a cool little utility called EVERYTHING because the Microsoft search stinks

anyway I found some old app in this directory:

C:\Program Files\Splunk\etc\peer-apps

it was called something like Cluster-Base-Config and sure enough it had a web.conf file with this in it:

[settings]

startwebserver = false

so I remmed it out like so and restarted Splunk and all is well now

 

[settings]

#startwebserver = false

 

someday I'll ask you all about his peer-apps sub directory, LOL 

0 Karma

Gregski11
Contributor

may have found a clue in C:\Program Files\Splunk\var\log\splunk\splunkd.log


12-27-2022 21:05:26.720 -0800 INFO UiHttpListener [11452 WebuiStartup] - Web UI disabled in web.conf [settings]; not starting

0 Karma

SanjayReddy
SplunkTrust
SplunkTrust

Hi @Gregski11 

 

$SPLUNK_HOME/etc/system/local/web.conf 

please add follwing in web.conf and restart the splunk

[settings]
startwebserver = 1

 

0 Karma

Gregski11
Contributor

thanks Sanjay I had exactly that in my local\web.conf and it still was not working despite it also being enabled in the default\web.conf so I was pulling my hair out 

0 Karma

SanjayReddy
SplunkTrust
SplunkTrust

Hi @Gregski11 

 

can you run following command from cmd

splunk bin directory


splunk btool web list --debug | findstr startwebserver

Career Survey
First 500 qualified respondents will receive a $20 gift card! Tell us about your professional Splunk journey.
Get Updates on the Splunk Community!

.conf25 Global Broadcast: Don’t Miss a Moment

Hello Splunkers, .conf25 is only a click away.  Not able to make it to .conf25 in person? No worries, you can ...

Observe and Secure All Apps with Splunk

 Join Us for Our Next Tech Talk: Observe and Secure All Apps with SplunkAs organizations continue to innovate ...

What's New in Splunk Observability - August 2025

What's New We are excited to announce the latest enhancements to Splunk Observability Cloud as well as what is ...