Splunk Enterprise Security

After Enterprise Security Update I get connection reset by peer

andresito123
Communicator

I upgraded to the latest ES app and now I get "The connection was reset" error when I am trying to connect to the web interface.

0 Karma

LukeMurphey
Champion

SplunkWeb likely was not able to start.

This is likely due to old advanced XML modules being left around. Delete the directory $SPLUNK_HOME/etc/apps/SA-Utils/appserver/modules/SOLNLookupEditor and restart SplunkWeb.

See https://answers.splunk.com/answers/620634/why-wont-splunkweb-start-after-es-was-upgraded.html for more details.

Get Updates on the Splunk Community!

Earn a $35 Gift Card for Answering our Splunk Admins & App Developer Survey

Survey for Splunk Admins and App Developers is open now! | Earn a $35 gift card!      Hello there,  Splunk ...

Continuing Innovation & New Integrations Unlock Full Stack Observability For Your ...

You’ve probably heard the latest about AppDynamics joining the Splunk Observability portfolio, deepening our ...

Monitoring Amazon Elastic Kubernetes Service (EKS)

As we’ve seen, integrating Kubernetes environments with Splunk Observability Cloud is a quick and easy way to ...