Security

What conditions would cause Splunk Web to not work properly?

sahils
New Member

I am not able to open Splunk Web. I checked all Processes are running fine. I restarted the Splunkd service and after that, Splunk Web started working fine. I checked the log files Splunkd.cfg, but couldn't find anything. I wanted to know, what are conditions for when Splunk Web is not working?

Thanks,
Sahil Sharma
sahils@amgen.com

Tags (1)
0 Karma
1 Solution

Yasaswy
Contributor

With amount of information here, this is just speculation. That being said, you mentioned it did not work in the beginning but started to work after a restart. This is usually typical of splunkweb not receiving a response from splunk daemon. If that's case you should have seen it in the log (splunkd.log)... did you check there? If that's the case then there seems to be load on your splunkd. You will have to tune your system for optimal load.

View solution in original post

0 Karma

fdi01
Motivator
  1. first look if your splunkd is running. to run it go to splunk_home/bin directory and run: sudo ./splunk start before run https://localhost:8000
  2. change your browser(firefox ...) or the version
  3. look if you no change splunk web port
  4. restart your machine
  5. reinstall your splunk.
0 Karma

Yasaswy
Contributor

With amount of information here, this is just speculation. That being said, you mentioned it did not work in the beginning but started to work after a restart. This is usually typical of splunkweb not receiving a response from splunk daemon. If that's case you should have seen it in the log (splunkd.log)... did you check there? If that's the case then there seems to be load on your splunkd. You will have to tune your system for optimal load.

0 Karma

sahils
New Member

I checked the splunkd.log file for the errors and see the ERROR IndexConfig in splunkd.log But could not found anything substantial.

0 Karma

sahils
New Member

Splunk Version 6.2.0
Linux Environment
And Using IE Version 9 and Chrome Version 42.0.2311.90 and Login through https://localhost:8000

0 Karma

harsmarvania57
Ultra Champion

If you are opening splunk web remotely you need to use https://SERVERNAME:8000 or try http://SERVERNAME:8000

0 Karma

ChrisG
Splunk Employee
Splunk Employee

Please provide more information: what version of Splunk Enterprise are you running, what operating system, what browser and version, what port, and so on. The more detail you provide about your environment and what specifically you are doing, the more likely it is that the community will be able to answer your question.

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Design, Compete, Win: Submit Your Best Splunk Dashboards for a .conf26 Pass

Hello Splunkers,  We’re excited to kick off a Splunk Dashboard contest! We know that dashboards are a primary ...

May 2026 Splunk Expert Sessions: Security & Observability

Level Up Your Operations: May 2026 Splunk Expert Sessions Whether you are refining your security posture or ...

Network to App: Observability Unlocked [May & June Series]

In today’s digital landscape, your environment is no longer confined to the data center. It spans complex ...