Hello,
when I try to login to splunk heavy forwarder through UI to install splunk apps, I am getting "500 Internal Server Error" when I do "http://myserver:8000" the UI is coming up but once I am try to login getting the error, any suggestion to fix this?
thanks
Hi raindrop18,
without access to your system, the only suggest is to verify the usual access problems:
You can verify the first one using CLI at the end of the Splunk boot.
For the second one, use telnet from your pc to the Splunk Heavy Forwarder telnet myserver 8000
to verify if there is a firewall problem.
For the third one, see in $SPLUNK_HOME/etc/system/local/web.conf if startwebserver
is equal to 1 (0 is disabled).
Otherwise, I suggest to open a case to Splunk Support.
Bye.
Giuseppe