Installation

Why is the Web interface not available in splunk enterprise?

CarolinaHB
Engager

Hi ,

I installed splunk on a linux server but it sent me the following error "Warning: web interface does not seem to be avaible" in Splunk Enterprise. 

 
 

2020-08-14C.png

I searched in /opt/splunk/var/log/splunk/ but I can't find anything. 

Can you help me, please?

Regards. 

Labels (3)
Tags (1)
0 Karma
1 Solution

rabbidroid
Path Finder

run "ps -ef | grep splunk" and check what user Splunk is running.

View solution in original post

0 Karma

vr2312
Contributor

Hi @CarolinaHB , 

As you have installed the application as root and also started the service as root, there might be a chance if the port 8000 is being utilized by another application or blocked by the firewall.
Could you please check if 
1. Port 8000 is open

2. If port 800 is being used by another application 

netstat -tulpn | grep :8000

0 Karma

un1claudiu
Engager

restart the Splunk server and run the ./splunk start from root account. Worked for me!

rabbidroid
Path Finder

What user are you running Splunk as?

0 Karma

CarolinaHB
Engager

Hi, 

I'm running with root the following command ./splunk start --accept-license

 

 

 

0 Karma

rabbidroid
Path Finder

run "ps -ef | grep splunk" and check what user Splunk is running.

0 Karma

CarolinaHB
Engager

User Splunk is running as root 

Captura.PNG

 

0 Karma

rabbidroid
Path Finder

That means Splunk is not running. start Splunk in debug mode

$SPLUNK_HOME/bin/splunk start --debug

0 Karma

CarolinaHB
Engager

Hi @rabbidroid ,

I'm trying with  $SPLUNK_HOME/bin/splunk start --debug but It is not running.

It send me the same message WARNING: web interface does not seem to be available!

I already installed it again and nothing

Regards.

0 Karma

isoutamo
SplunkTrust
SplunkTrust

Usually you could found reason for that from ..../var/log/splunk/splunkd.log

It’s interesting that you haven’t this log on your system. Can you check if there is some other process listening in port 8000? Usually splunk told that and offer you to change the used port. 

If this is a new unused environment, maybe the easiest try is just remove everything and start again?

Any reason why you are using a quite old version without Splunk’s y2k20 fixes?


r. Ismo

0 Karma

impurush
Contributor

@CarolinaHB 
Did you try stopping and starting the server again?
I faced sometimes same thing, just try to stop and start again, generally the web interface likely to be available.
If that did not help, you can try looking into different solutions.

0 Karma
Get Updates on the Splunk Community!

Observability Highlights | January 2023 Newsletter

 January 2023New Product Releases Splunk Network Explorer for Infrastructure MonitoringSplunk unveils Network ...

Security Highlights | January 2023 Newsletter

January 2023 Splunk Security Essentials (SSE) 3.7.0 ReleaseThe free Splunk Security Essentials (SSE) 3.7.0 app ...

Platform Highlights | January 2023 Newsletter

 January 2023Peace on Earth and Peace of Mind With Business ResilienceAll organizations can start the new year ...