Facing problem during configure "Splunk Enterprise Security Suite"

[arun_kant_sharm]

Hi Experts,

I try to install "Splunk Enterprise Security Suite" in my standalone environment.
For this I follow:
https://docs.splunk.com/Documentation/ES/6.0.0/Install/InstallEnterpriseSecuritySHC

But when I try to follow below step:

Install Enterprise Security on the deployer.
Increase the Splunk Web upload limit, for example to 1GB, by creating a file called $SPLUNK_HOME/etc/system/local/web.conf with the following stanza.
[settings]
max_upload_size = 1000

Then I restart my splunk server, so at the time of restart it give below error
WARNING: web interface does not seem to be available!

Kindly suggest the right guide for installing and configuring "Splunk Enterprise Security Suite".

[ndias_splunk]

By chance, did you follow the guide exactly? Did you include the comment in the stanza?

max_upload_size = 1000 // increases SplunkWeb upload limit to 1GB

If so, try removing the comment so the stanza is:

max_upload_size = 1000

Then restart Splunk.

[arun_kant_sharm]

My Splunk instance are on AWS EC2 using instance type c5.4xlarge

[jawaharas]

1. What's the output of './splunk btool check' command?
2. Did you make changes to $SPLUNK_HOME/etc/system/default/web.conf file?
3. What's are the errors you can see in 'splunkd.log' file?