This error is shown on App Log when I tried to initiate splunkweb service. Splunkd Starts normally.
I'm Running Splunk Version 4.22 over Windows 2003
APP Log Error
The instance's SvcRun() method failed
File "C:\Program Files\Splunk\Python-2.6\Lib\site-packages\win32\win32serviceutil.py", line 785, in SvcRun
self.SvcDoRun()
File "C:\Program Files\Splunk\bin\SplunkWebService.py", line 37, in SvcDoRun
subprocess.call(gMakeCertsCmd)
File "C:\Program Files\Splunk\Python-2.6\Lib\subprocess.py", line 470, in call
return Popen(*popenargs, **kwargs).wait()
File "C:\Program Files\Splunk\Python-2.6\Lib\subprocess.py", line 621, in __init__
errread, errwrite)
File "C:\Program Files\Splunk\Python-2.6\Lib\subprocess.py", line 830, in _execute_child
startupinfo)
<type 'exceptions.WindowsError'>: [Error 193] File "C:\Program Files\Splunk\Python-2.6\Lib\site-packages\win32\win32serviceutil.py", line 785, in SvcRun
self.SvcDoRun()
File "C:\Program Files\Splunk\bin\SplunkWebService.py", line 37, in SvcDoRun
subprocess.call(gMakeCertsCmd)
File "C:\Program Files\Splunk\Python-2.6\Lib\subprocess.py", line 470, in call
return Popen(*popenargs, **kwargs).wait()
File "C:\Program Files\Splunk\Python-2.6\Lib\subprocess.py", line 621, in __init__
errread, errwrite)
File "C:\Program Files\Splunk\Python-2.6\Lib\subprocess.py", line 830, in _execute_child
I tried that but still no luck.
Just performed a upgrade from 4.1.5 to 4.2.4 and now SplunkWeb will not start. I am getting the same error message listed above in the event logs.
This is what is listed in my splunk-launch.conf for SPLUNK_HOME file however the line is commented out so not exactly sure what the fix was for other people. I did try removing the end \ and then trying to restart splunk but it did not work. I am running 64 bit 2008R2
# SPLUNK_HOME=C:\Program Files\Splunk\
Any help would be great.
Try to uncomment the line and remove the trailing slash. Then restart.
I have the same problem on 4.2.4
Update, we were able to install it on the C: drive. On 😧 it never worked.
During install, I modified the
$SPLUNK_HOME\etc\splunk-launch.conf
specifying the proper $SPLUNK_HOME and removing the trailing \ as per this bug reported in the 4.2.1 release notes.
Splunk Web fails to start if the SPLUNK_HOME path in splunk-launch.conf ends with a directory delimiter ("/" for Linux or "\" for Windows). (SPL-38054)
Update: Splunk 4.2.1 and 4.2.2 show the same problem. Splunk 4.2 does not even complete the installation as Windows reverts it...
same problem here
I have seen the same problem with Splunk 4.2.1 32bit on a Windows 2k3 32 bit with underlying Intel Xeon CPU