Admin Manual

 


How Splunk Works

Disable SplunkWeb

This documentation does not apply to the most recent version of Splunk. Click here for the latest version.

Disable SplunkWeb

You can use the following two methods to set SplunkWeb so that it does not start when you run Splunk:


Both of these methods require that you make changes to your web.conf file.


To re-enable SplunkWeb after setting it to be disabled, refer to the Re-enable SplunkWeb topic below.


Edit web.conf

To ensure that Splunk never starts SplunkWeb, create a $SPLUNK_HOME/etc/bundles/local/web.conf file with the following:


[settings]
startwebserver = 0

Note: If you already have a $SPLUNK_HOME/etc/bundles/local/web.conf file simply insert the startwebserver = 0 inside of the [settings] stanza.


After you edit web.conf, you must restart Splunk for your changes to take effect.


Run the disable command

Disable SplunkWeb through the CLI by using the disable command. Type the following into the command line:


./splunk disable webserver



After you execute the command, you must restart Splunk for your changes to take effect.


Re-enable SplunkWeb

There are two ways to re-enable SplunkWeb:


./splunk enable webserver

You must restart Splunk for the changes to take effect.

This documentation applies to the following versions of Splunk: 3.0 , 3.0.1 , 3.0.2 , 3.1 , 3.1.1 , 3.1.2 , 3.1.3 , 3.1.4 View the Article History for its revisions.


You must be logged into splunk.com in order to post comments. Log in now.

Was this documentation topic helpful?

If you'd like to hear back from us, please provide your email address:

We'd love to hear what you think about this topic or the documentation as a whole. Feedback you enter here will be delivered to the documentation team.

Feedback submitted, thanks!