Security

splunkweb is not starting

solntcev
Engager

Windows 7 x64
Splunk installed from splunk-4.3-115073-x64-release.msi for local system user
From Event Log:


The instance's SvcRun() method failed
File "C:\Program Files\Splunk\Python-2.7\Lib\site-packages\win32\win32serviceutil.py", line 785, in SvcRun
self.SvcDoRun()
File "C:\Program Files\Splunk\bin\SplunkWebService.py", line 39, in SvcDoRun
from splunk.appserver.mrsparkle import root
File "C:\Program Files\Splunk\Python-2.7\Lib\site-packages\splunk\appserver\mrsparkle_init.py", line 13, in
from lib.decorators import *
File "C:\Program Files\Splunk\Python-2.7\Lib\site-packages\splunk\appserver\mrsparkle\lib\decorators.py", line 2, in
import cherrypy
File "C:\Program Files\Splunk\Python-2.7\Lib\site-packages\cherrypy__init
_.py", line 161, in
from cherrypy import _cptools
File "C:\Program Files\Splunk\Python-2.7\Lib\site-packages\cherrypy_cptools.py", line 226, in
from cherrypy.lib import cptools, encoding, auth, static, tidy
File "C:\Program Files\Splunk\Python-2.7\Lib\site-packages\cherrypy\lib\static.py", line 2, in
mimetypes.init()
File "C:\Program Files\Splunk\Python-2.7\Lib\mimetypes.py", line 355, in init
db.read_windows_registry()
File "C:\Program Files\Splunk\Python-2.7\Lib\mimetypes.py", line 259, in read_windows_registry
for ctype in enum_types(mimedb):
File "C:\Program Files\Splunk\Python-2.7\Lib\mimetypes.py", line 249, in enum_types
ctype = ctype.encode(default_encoding) # omit in 3.x!
: 'utf8' codec can't decode byte 0xe0 in position 0: invalid continuation byte

Tags (1)
0 Karma
1 Solution

sanufrienko
Engager

This problem is related to Python on Windows. I fixed it like this:
In Splunk install directory, there is a Python-2.7 directory. Go to Python-2.7\Lib, find mimetypes.py. Inside mimetypes.py find function read_windows_registry(). In this function, replace UnicodeEncodeError or UnicodeDecodeError with UnicodeError. Restart Splunkweb and it will start.

View solution in original post

sanufrienko
Engager

This problem is related to Python on Windows. I fixed it like this:
In Splunk install directory, there is a Python-2.7 directory. Go to Python-2.7\Lib, find mimetypes.py. Inside mimetypes.py find function read_windows_registry(). In this function, replace UnicodeEncodeError or UnicodeDecodeError with UnicodeError. Restart Splunkweb and it will start.

solntcev
Engager

i don't have splunk installed anymore, but this looks like it might work

0 Karma

tspider
New Member

the same problem Windows 7 x64 russian OS
splunk-5.0.4-172409-x64-release.msi

0 Karma

denis_lopantsev
New Member

The same problem today for Vista x86 Russian...failed to start the service with the same error in eventlog. Version splunk-4.3.2-123586-x86-release.

0 Karma

solntcev
Engager

language of OS is russian

0 Karma

hexx
Splunk Employee
Splunk Employee

This looks like a possible brand new defect, I certainly couldn't find it reported in our internal bug database. Out of curiosity, what is the local language of your Windows OS?

0 Karma
Get Updates on the Splunk Community!

Building Reliable Asset and Identity Frameworks in Splunk ES

 Accurate asset and identity resolution is the backbone of security operations. Without it, alerts are ...

Cloud Monitoring Console - Unlocking Greater Visibility in SVC Usage Reporting

For Splunk Cloud customers, understanding and optimizing Splunk Virtual Compute (SVC) usage and resource ...

Automatic Discovery Part 3: Practical Use Cases

If you’ve enabled Automatic Discovery in your install of the Splunk Distribution of the OpenTelemetry ...