Disable SplunkWeb
This documentation does not apply to the most recent version of Splunk. Click here for the latest version.
Disable SplunkWeb
You can use the following two methods to set SplunkWeb so that it does not start when you run Splunk:
- Add a line in
web.confdirectly - Run the
disablecommand in the CLI (command line)
Both of these methods require that you make changes to your web.conf file.
To re-enable SplunkWeb after setting it to be disabled, refer to the Re-enable SplunkWeb topic below.
Edit web.conf
To ensure that Splunk never starts SplunkWeb, create a $SPLUNK_HOME/etc/bundles/local/web.conf file with the following:
[settings] startwebserver = 0
Note: If you already have a $SPLUNK_HOME/etc/bundles/local/web.conf file simply insert the startwebserver = 0 inside of the [settings] stanza.
After you edit web.conf, you must restart Splunk for your changes to take effect.
Run the disable command
Disable SplunkWeb through the CLI by using the disable command. Type the following into the command line:
./splunk disable webserver
After you execute the command, you must restart Splunk for your changes to take effect.
Re-enable SplunkWeb
There are two ways to re-enable SplunkWeb:
- Set
startwebserver= 1inweb.conf. - Run the
enableCLI command:
./splunk enable webserver
You must restart Splunk for the changes to take effect.
This documentation applies to the following versions of Splunk: 3.0 , 3.0.1 , 3.0.2 , 3.1 , 3.1.1 , 3.1.2 , 3.1.3 , 3.1.4 View the Article History for its revisions.