Documentation > Splunk > Admin Manual > Splunkd appears to be down

Admin Manual

 


Overview
Setting Up Data Inputs
Authentication
Changing the Way Splunk Processes Your Data
Creating and Using Configuration Bundles
Configuring Your Sources
Splunk-2-Splunk Management
Integration
Managing Your Filesystem
How-To's

Splunkd appears to be down

This documentation does not apply to the most recent version of Splunk. Click here for the latest version.

Contents

Splunkd appears to be down

Sometimes Splunk's web interface will show you the message ""Splunkd appears to be down," when splunkd is definitely up and running. There are several potential causes.


No localhost entry in /etc/hosts

The Splunkweb interface is configured to connect to the splunkd daemon in this line in the file $SPLUNK_HOME/opt/splunk/etc/myinstall/search.xml. 


<managerURL>http://localhost:8089</managerURL>

If your Splunk Server host has no entry for localhost in its /etc/hosts file, this will fail. Either add a localhost entry, or edit search.xml to change the managerURL entry from "localhost" to something that will resolve -- 127.0.0.1 or the DNS-supported hostname of the host.


Splunkd may need a few more seconds to come up

Sometimes the web server is ready to respond before the daemon. If you notice this after reboots, try putting a sleep delay or otherwise making the splunkweb (twistd.py) process wait before it launches.


Your license file contains line-breaks or other hidden characters

Some email clients have been inserting hidden characters (line-breaks, null characters, etc.) to the license string when it gets emailed to you. These hidden characters can break your license string causing Splunk to go down. To resolve this issue you should copy the license string from the store https://www.splunk.com/store/myorders and paste it into your license file in $SPLUNK_HOME/etc/splunk.license

Retrieved from "http://docs.splunk.com/Documentation/Splunk/2.2.3/Admin/SplunkdAppearsToBeDown"

This documentation applies to the following versions of Splunk: 2.1 , 2.2 , 2.2.1 , 2.2.3 , 2.2.6 View the Article History for its revisions.


You must be logged into splunk.com in order to post comments. Log in now.

Was this documentation topic helpful?

If you'd like to hear back from us, please provide your email address:

We'd love to hear what you think about this topic or the documentation as a whole. Feedback you enter here will be delivered to the documentation team.