I am new to Splunk and just installed on Windows 32 bit OS using the installer. After completing the installation, splunkd seems to be started and has a PID associated with it, but splunkweb starts and then stops itself. Restarting the splunkweb service does the same thing.
I looked into the web_service.log and here's what I see:
2012-05-16 18:58:25,426 INFO [4fb45b409b1b8cb70] init:160 - Using default logging config file: C:\Program Files\Splunk\etc\log.cfg
2012-05-16 18:58:25,427 INFO [4fb45b409b1b8cb70] init:176 - Setting logger=splunk level=INFO
2012-05-16 18:58:25,427 INFO [4fb45b409b1b8cb70] init:176 - Setting logger=splunk.appserver level=INFO
2012-05-16 18:58:25,427 INFO [4fb45b409b1b8cb70] init:176 - Setting logger=splunk.appserver.controllers level=INFO
2012-05-16 18:58:25,427 INFO [4fb45b409b1b8cb70] init:176 - Setting logger=splunk.appserver.lib level=WARN
2012-05-16 18:58:26,207 ERROR [4fb45b409b1b8cb70] root:543 - Unable to start splunkweb
2012-05-16 18:58:26,207 ERROR [4fb45b409b1b8cb70] root:544 - init() got an unexpected keyword argument 'disable_ssl_certificate_validation'
Traceback (most recent call last):
File "C:\Program Files\Splunk\Python-2.7\Lib\site-packages\splunk\appserver\mrsparkle\root.py", line 106, in
from controllers.top import *
File "C:\Program Files\Splunk\Python-2.7\Lib\site-packages\splunk\appserver\mrsparkle\controllers\top.py", line 11, in
from admin import AdminController
File "C:\Program Files\Splunk\Python-2.7\Lib\site-packages\splunk\appserver\mrsparkle\controllers\admin.py", line 30, in
import splunk.input
File "C:\Program Files\Splunk\Python-2.7\Lib\site-packages\splunk\input.py", line 17, in
h = httplib2.Http(disable_ssl_certificate_validation = True)
TypeError: init() got an unexpected keyword argument 'disable_ssl_certificate_validation'
I encountered the same problem. In my case, it appears there was a conflict between the version of Python installed by Splunk at C:\Program Files\Splunk\Python-2.7, and the version of Python I already had installed at C:\Python27, which was on the path. Renaming the latter folder allowed Splunk Web to start. I don't understand the reason for this apparent conflict, but I'm glad to have a work around.