Are you a member of the Splunk Community?
- Find Answers
- :
- Splunk Administration
- :
- Admin Other
- :
- Security
- :
- 502 Bad Gateway -- When I login to a aserver
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark Topic
- Subscribe to Topic
- Mute Topic
- Printer Friendly Page
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
502 Bad Gateway -- When I login to a aserver
Hi,
I am not able to login to my splunk environment, its showing as 502 Bad Gateway
but in the backend server(using linux) I can see the splunk status as running, dnt no why the problem occurrs.
Before the issue was the splunk server will be running but will get 502 Bad Gateway error after 2 days or so, I had to login in backend and restart then it was working fine, but now nothing is working.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hello @sarithapguptha ,
502 Bad Gateway error is usually generated by a proxy/gateway/loadbalancer between your browser and the backend splunk server. Please describe your setup. Can you reach the backend directly, bypassing the proxy?
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hi PavelP,
It's a standalone environment, I am able to reach the backend without any issues, I am able to login and check the status, restart everything but when I try to access the link its showing as 502 Bad Gateway
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
@sarithapguptha
by backend you mean the splunk UI at http(s)://splunk:8000?
do you see 502 errors in internals logs?
index=_internal status=502
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
I am not able to access the Splunk UI and when i restart i get a message as "Web interface not available"
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
@sarithapguptha ,
do you see any errors in $SPLUNK_HOME/var/log/splunk/splunkd.log ?
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
no errors...
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
@sarithapguptha
if this a test splunk install and you don't have any important data then deinstall splunk completely and reinstall following step by step splunk installation instructions : https://docs.splunk.com/Documentation/Splunk/8.0.3/Installation/Chooseyourplatform
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
it's not a test splunk instance, I have other applications installed in it.
Take Action Automatically on Splunk Alerts with Red Hat Ansible Automation Platform
Calling All Security Pros: Ready to Race Through Boston?
Beyond Detection: How Splunk and Cisco Integrated Security Platforms Transform ...
