Knowledge Management

Troubleshooting Splunk

mjlsnombrado
Communicator

Hi everyone

Can I ask for useful troubleshooting commands for example restart of services, licenses check, etc ?

Thanks in advance 🙂

0 Karma
1 Solution

vijithv
Explorer

Hi, the basic commands that help to start off splunk are,

splunk help - display usage summary

splunk help display the details of a specific object

splunk [start | stop | restart] - Start, stop and restart splunk
splunk start --accept-license - automatically accept the license without prompt
splunk status -display the splunk process status
splunk show splunkd-port - show the port that the splunkd listens on
splunk show web-port - show the port that splunk web listens on
splunk show servername - show the servername of this instance
splunk show default-hostname - show the default host name used for all data inputs

and this below link have the reference to CLI commands for troubleshooting
http://docs.splunk.com/Documentation/Splunk/7.0.3/Troubleshooting/CommandlinetoolsforusewithSupport

View solution in original post

0 Karma

vijithv
Explorer

Hi, the basic commands that help to start off splunk are,

splunk help - display usage summary

splunk help display the details of a specific object

splunk [start | stop | restart] - Start, stop and restart splunk
splunk start --accept-license - automatically accept the license without prompt
splunk status -display the splunk process status
splunk show splunkd-port - show the port that the splunkd listens on
splunk show web-port - show the port that splunk web listens on
splunk show servername - show the servername of this instance
splunk show default-hostname - show the default host name used for all data inputs

and this below link have the reference to CLI commands for troubleshooting
http://docs.splunk.com/Documentation/Splunk/7.0.3/Troubleshooting/CommandlinetoolsforusewithSupport

0 Karma

mjlsnombrado
Communicator

Thanks for the help 🙂

0 Karma

deepashri_123
Motivator

Hey@mjlsnombrado,

You can use btool command to check configuration files that are being used.
You can refer these documents for further reference:
http://docs.splunk.com/Documentation/Splunk/7.0.3/Troubleshooting/Usebtooltotroubleshootconfiguratio...
http://docs.splunk.com/Documentation/Splunk/7.0.3/Troubleshooting/IntrototroubleshootingSplunk
Let me know if this helps!!

0 Karma

mjlsnombrado
Communicator

It helps thanks 🙂

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

[Puzzles] Solve, Learn, Repeat: Matching cron expressions

This puzzle (first published here) is based on matching timestamps to cron expressions.All the timestamps ...

Design, Compete, Win: Submit Your Best Splunk Dashboards for a .conf26 Pass

Hello Splunkers,  We’re excited to kick off a Splunk Dashboard contest! We know that dashboards are a primary ...

May 2026 Splunk Expert Sessions: Security & Observability

Level Up Your Operations: May 2026 Splunk Expert Sessions Whether you are refining your security posture or ...