I have ES APP (v 2.4.1) installed on Splunk (v 5.0.5) on Windows machine.
Processor- 2 GHz
System Type- 64-bit OS
After installation and initial configuration of the ES App, when I try to login into Splunk or browse through the tabs(after logon), I get the following error:
500 Internal Server Error
However, after refreshing a number of times, I get the following:
An error occurred while rendering the page template.See web_service.log for more details.
After refreshing the page repeatedly, Splunk Web console is displayed but with a solid red bar either on top of the page or above/below the time chart. I have tried changing the SPLUNKDCONNECTIONTIMEOUT = 60 instead of its default value of 30 in $SPLUNKHOME\Python2.7\sitepackages\splunk\rest_init_.py but it did not work.
Please suggest as to what could be wrong here and how to rectify it.
Look at the login page. If it says SPLUNK_VERSION=UNKNOWN, then you need to bounce the entire server. If you have WS2003R2 64-bit, this will be a common occurrence for you. The Cache is filling up and the server is loosing connectivity with the domain server. You can confirm that this is the issue if you check the WMI logs and see a ubroker error.