Security

Splunk enterprise webserver not available after SSL install

afolabia
Path Finder

I'm doing a new install on a Linux Centos 7 VM . We have our own CA that issue our certs. After installing my SSL Certs and creating the web.conf in system/local to use the certs, and restarting splunk i get Waiting for web server at https://127.0.0.1:8000 to be available... and then web server not available. If I point back to web.conf in default, the error goes away and splunk is available. SSL is enable and port is also included in the .conf file. What am i missing?

Tags (1)
0 Karma
1 Solution

afolabia
Path Finder

Thanks. It was a certificate issue. I had to extract the keys and convert the cert.

View solution in original post

0 Karma

afolabia
Path Finder

Thanks. It was a certificate issue. I had to extract the keys and convert the cert.

0 Karma

skalliger
Motivator

If the web server is not starting, it's most likely due to an error with either the certificate/the certificate chain or in decrypting it. Please take a look into the splunkd.log - there should be ERRORs visible saying why the web server can't start.

Skalli

Get Updates on the Splunk Community!

Modernize your Splunk Apps – Introducing Python 3.13 in Splunk

We are excited to announce that the upcoming releases of Splunk Enterprise 10.2.x and Splunk Cloud Platform ...

New Release | Splunk Cloud Platform 10.1.2507

Hello Splunk Community!We are thrilled to announce the General Availability of Splunk Cloud Platform 10.1.2507 ...

🌟 From Audit Chaos to Clarity: Welcoming Audit Trail v2

🗣 You Spoke, We Listened  Audit Trail v2 wasn’t written in isolation—it was shaped by your voices.  In ...