Security

Why splunkweb starts on Windows after restarting the indexers, despite defining startwebserver = 0?

ollie920049
Path Finder

I have explicitly defined startwebserver = 0 in an app,

C:/Program Files/Splunk/bin>splunk cmd btool web list --debug | grep startwebserver

C:/Program Files/Splunk/etc/slave-apps/all_indexers/default/web.conf
   startwebserver = 0

As you can see, it is prioritized correctly and nothing appears to be overwriting it.

However, if I restart the indexers, the web service comes up.

Note this is a Windows installation.

Anybody got any ideas what might be causing this?

Thanks in advance

Tags (2)
0 Karma

gfuente
Motivator

Hello

You should put it in a local folder, for example

C:/Program Files/Splunk/etc/slave-apps/all_indexers/local/web.conf

To avoid overriding issues, and as a best practice you should never put you custom configurations in the default folder

Regards

0 Karma
Get Updates on the Splunk Community!

Index This | I am a number, but when you add ‘G’ to me, I go away. What number am I?

March 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...

What’s New in Splunk App for PCI Compliance 5.3.1?

The Splunk App for PCI Compliance allows customers to extend the power of their existing Splunk solution with ...

Extending Observability Content to Splunk Cloud

Register to join us !   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to ...