I have not had much luck with the web_service.log for troubleshooting. Can you restart splunk, then run a tail -300 on the /opt/splunk/var/log/splunk/splunkd.log and post the results here? There should be an entry similar to this: -0600 ERROR SSLCommon - Can't read certificate file /opt/splunk/etc/auth/MYSPLUNKCERTS & Key/splunk-Hostname-Private.key errno=33558530 error:02001002:system library:fopen:No such file or directory -0600 ERROR HTTPServer - SSL context could not be created - error in cert or password is wrong -0600 ERROR HTTPServer - SSL will not be enabled That may provide better suggest to debug ... View more