Splunk Enterprise

Supervisor error

Kevin0202
Engager

I upgraded Splunk Enterprise to 10.0.0, but the supervisor is not running.

螢幕擷取畫面 2025-08-13 111456.png

Checked the server.conf the supervisor is enabled

[teleport_supervisor]
disabled = false

Search

index=_internal source=*supervisor.log*

 return empty result

Labels (1)
0 Karma

PrewinThomas
Motivator

@Kevin0202 
Can you see any errors with below,

index=_internal source=*splunkd.log* "*supervisor*"


Regards,
Prewin
Splunk Enthusiast | Always happy to help! If this answer helped you, please consider marking it as the solution or giving a Karma. Thanks!

Kevin0202
Engager
index=_internal source=*splunkd.log* "*supervisor*"

Kevin0202_0-1755062767921.png

I now restore backup and upgrade it again.

There are supervisor logs this time.

Kevin0202_1-1755062863222.png

 

0 Karma

PrewinThomas
Motivator

@Kevin0202 
Can you check below,

-Is your Splunk running as root or a dedicated user?

-Check if any other process is bound to port 8194

netstat -anp | grep 8194

-Also check internal logs for any certificate error

Regards,
Prewin
Splunk Enthusiast | Always happy to help! If this answer helped you, please consider marking it as the solution or giving a Karma. Thanks!

0 Karma

Kevin0202
Engager

Kevin0202_0-1755067449741.png

I did not find any logs of certificate error related to supervisor or KVstore.

0 Karma
Get Updates on the Splunk Community!

Strengthen Your Future: A Look Back at Splunk 10 Innovations and .conf25 Highlights!

The Big One: Splunk 10 is Here!  The moment many of you have been waiting for has arrived! We are thrilled to ...

Now Offering the AI Assistant Usage Dashboard in Cloud Monitoring Console

Today, we’re excited to announce the release of a brand new AI assistant usage dashboard in Cloud Monitoring ...

Stay Connected: Your Guide to October Tech Talks, Office Hours, and Webinars!

What are Community Office Hours? Community Office Hours is an interactive 60-minute Zoom series where ...