Join the Conversation
- Find Answers
- :
- Splunk Administration
- :
- Admin Other
- :
- Security
- :
- splunkweb is not running
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark Topic
- Subscribe to Topic
- Mute Topic
- Printer Friendly Page
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
splunkweb is not running
[root@n]# ./splunk status
splunkd is running (PID: 6024).
splunk helpers are running (PIDs: 6025).
splunkweb is not running.
I am curious that the check http port will not run while start splunk.
[root@pptp-cent6 bin]# ./splunk start
splunkd 6024 was not running.
Stopping splunk helpers...
[ OK ]
Done.
Stopped helpers.
Removing stale pid file... done.
Splunk> Finding your faults, just like mom.
Checking prerequisites...
Checking mgmt port [8089]: open
Checking configuration... Done.
Checking index directory...
Validated databases: _thefishbucket
Done
Success
Checking conf files for typos...
All preliminary checks passed.
Starting splunk server daemon (splunkd)...
[ OK ]
Bellow is the web_service log information:
root:133 - ENGINE: Caught signal SIGTERM.
2012-05-29 14:38:24,379 INFO [4fc46e648196381ac] root:133 - ENGINE: Bus STOPPING
2012-05-29 14:38:24,635 INFO [4fc46e648196381ac] root:133 - ENGINE: HTTP Server cherrypy._cpwsgi_server.CPWSGIServer(('0.0.0.0', 8000)) shut down
2012-05-29 14:38:24,649 INFO [4fc46e648196381ac] root:133 - ENGINE: Stopped thread 'Monitor'.
2012-05-29 14:38:24,681 INFO [4fc46e648196381ac] root:133 - ENGINE: Stopped thread 'Monitor'.
2012-05-29 14:38:24,687 INFO [4fc46e648196381ac] root:133 - ENGINE: Stopped thread '_TimeoutMonitor'.
2012-05-29 14:38:24,688 INFO [4fc46e648196381ac] root:133 - ENGINE: Bus STOPPED
2012-05-29 14:38:24,688 INFO [4fc46e648196381ac] root:133 - ENGINE: Bus EXITING
2012-05-29 14:38:24,688 INFO [4fc46e648196381ac] root:133 - ENGINE: Bus EXITED
2012-05-29 14:38:24,689 INFO [4fc46e648196381ac] root:133 - ENGINE: Waiting for child threads to terminate...
Can someone tell me how to troubleshoot?
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Because thats what a light forwarder is, as above, go read the documentation!
http://docs.splunk.com/Documentation/Splunk/5.0/Deploy/Typesofforwarders
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Find the reason:
If i enable SplunkLightForwarder,it will not start Splunk web service
i modify $SPLUNK_HOME/etc/apps//SplunkLightForwarder/(local|default)/app.conf and set "state = disabled." and restart the splunk service,then it works.
Anyone can explain why so?
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
If Splunk Light Forwarder is enabled, Splunk Web is automatically disabled.
See documentation.
Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!
Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.
May 2026 Splunk Expert Sessions: Security & Observability
Network to App: Observability Unlocked [May & June Series]
SPL2 Deep Dives, AppDynamics Integrations, SAML Made Simple and Much More on Splunk ...
