Installation

Error starting splunkweb after upgrade to 5.0 (Ubuntu)

srich
Explorer

Having followed the Upgrade to 5.0 on Unix article, I'm unable to fully start splunk. The splunk daemons start fine but I get a "Error starting splunkweb" error message at the end of the startup process. Not sure what happened during the install/upgrade process.

/opt/splunk# service splunk start
Starting Splunk...

Splunk> CSI: Logfiles.

Checking prerequisites...
    Checking http port [80]: open
    Checking mgmt port [8089]: open
    Checking configuration...  Done.
    Checking indexes...
        Validated databases: _audit _blocksignature _internal _thefishbucket asset_discovery automation history main msad netflow_si_traffic os perfmon splunk_monitoring summary summary_postfix winevents
    Done
    Checking filesystem compatibility...  Done
    Checking conf files for typos...    Done
All preliminary checks passed.

Starting splunk server daemon (splunkd)...  Done

Starting splunkweb...  Error starting splunkweb.

Poking around in various log files, I receive the following messages in web_service.log

2012-10-30 17:07:35,812 INFO    [50905db7b21112610] __init__:161 - Using default logging config file: /opt/splunk/etc/log.cfg
2012-10-30 17:07:35,813 INFO    [50905db7b21112610] __init__:177 - Setting logger=splunk level=INFO
2012-10-30 17:07:35,813 INFO    [50905db7b21112610] __init__:177 - Setting logger=splunk.appserver level=INFO
2012-10-30 17:07:35,813 INFO    [50905db7b21112610] __init__:177 - Setting logger=splunk.appserver.controllers level=INFO
2012-10-30 17:07:35,813 INFO    [50905db7b21112610] __init__:177 - Setting logger=splunk.appserver.lib level=WARN
2012-10-30 17:07:36,106 ERROR   [50905db7b21112610] root:554 - Unable to start splunkweb
2012-10-30 17:07:36,106 ERROR   [50905db7b21112610] root:555 - [Errno 2] No such file or directory: '/opt/splunk/etc/apps/Splunk_TA_windows/appserver/modules/Windows_IFrame'
Traceback (most recent call last):
  File "/opt/splunk/lib/python2.7/site-packages/splunk/appserver/mrsparkle/root.py", line 106, in <module>
    from controllers.top import *
  File "/opt/splunk/lib/python2.7/site-packages/splunk/appserver/mrsparkle/controllers/top.py", line 13, in <module>
    from admin import AdminController
  File "/opt/splunk/lib/python2.7/site-packages/splunk/appserver/mrsparkle/controllers/admin.py", line 17, in <module>
    from splunk.appserver.mrsparkle.controllers.appinstall import AppInstallController
  File "/opt/splunk/lib/python2.7/site-packages/splunk/appserver/mrsparkle/controllers/appinstall.py", line 9, in <module>
    from splunk.appserver.mrsparkle.lib import cached, module
  File "/opt/splunk/lib/python2.7/site-packages/splunk/appserver/mrsparkle/lib/module.py", line 460, in <module>
    moduleMapper = ModuleMapper()
  File "/opt/splunk/lib/python2.7/site-packages/splunk/appserver/mrsparkle/lib/module.py", line 79, in __init__
    self.installedModules = self.getInstalledModules()
  File "/opt/splunk/lib/python2.7/site-packages/splunk/appserver/mrsparkle/lib/module.py", line 24, in helper
    return f(*a, **kw)
  File "/opt/splunk/lib/python2.7/site-packages/splunk/appserver/mrsparkle/lib/module.py", line 443, in getInstalledModules
    mods = self.getModuleList(root)
  File "/opt/splunk/lib/python2.7/site-packages/splunk/appserver/mrsparkle/lib/module.py", line 33, in helper
    return f(*a, **kw)
  File "/opt/splunk/lib/python2.7/site-packages/splunk/appserver/mrsparkle/lib/module.py", line 212, in getModuleList
    for filename in os.listdir(module_path):
OSError: [Errno 2] No such file or directory: '/opt/splunk/etc/apps/Splunk_TA_windows/appserver/modules/Windows_IFrame'

ls /opt/splunk/etc/apps/Splunk_TA_windows/appserver/modules

TA_Windows_FTR TA_Windows_IFrame

Tags (2)

campbellj1977
Explorer

You may want to check the JAVA requirements for Windows TA and Splunk for AD if you are using it. I ran into this problem before upgrading, while setting up Windows and AD components.

0 Karma

malmoore
Splunk Employee
Splunk Employee

Please open a support ticket and explain the steps you took which got you to this error when you submit the ticket.

http://www.splunk.com/support

0 Karma

MHibbin
Influencer

Why is Splunk trying to check TCP/80?

0 Karma
Get Updates on the Splunk Community!

Index This | I am a number, but when you add ‘G’ to me, I go away. What number am I?

March 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...

What’s New in Splunk App for PCI Compliance 5.3.1?

The Splunk App for PCI Compliance allows customers to extend the power of their existing Splunk solution with ...

Extending Observability Content to Splunk Cloud

Register to join us !   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to ...