Splunk Enterprise

How to restart a splunk on windows through Command Prompt and control panel?

surbhiQA
Engager

How to restart a splunk on windows through Command Prompt and control panel?

Tags (1)
0 Karma
1 Solution

kamlesh_vaghela
SplunkTrust
SplunkTrust

Hi Surbhi,

You can start and stop Splunk on Windows in one of the following ways:

1. Start and stop Splunk Enterprise processes via the Windows Services control panel (accessible from Start -> Control Panel -> Administrative Tools -> Services)

    Server daemon and Web interface: splunkd
    Web interface (in legacy mode only): splunkweb. In normal operation, this service starts, then immediately quits when it receives a start request.

2. Start and stop Splunk Enterprise services from a command prompt by using the NET START <service> or NET STOP <service> commands:

    Server daemon and Web interface: splunkd
    Web interface (in legacy mode only): splunkweb. In normal operation, this service starts, then immediately quits when it receives a start request.

3. Start, stop, or restart both processes at once by going to %SPLUNK_HOME%\bin and typing

> splunk [start|stop|restart] 

Please check below URL:

http://docs.splunk.com/Documentation/Splunk/7.0.3/Admin/StartSplunk#Start_Splunk_Enterprise_on_Windo...

View solution in original post

kamlesh_vaghela
SplunkTrust
SplunkTrust

Hi Surbhi,

You can start and stop Splunk on Windows in one of the following ways:

1. Start and stop Splunk Enterprise processes via the Windows Services control panel (accessible from Start -> Control Panel -> Administrative Tools -> Services)

    Server daemon and Web interface: splunkd
    Web interface (in legacy mode only): splunkweb. In normal operation, this service starts, then immediately quits when it receives a start request.

2. Start and stop Splunk Enterprise services from a command prompt by using the NET START <service> or NET STOP <service> commands:

    Server daemon and Web interface: splunkd
    Web interface (in legacy mode only): splunkweb. In normal operation, this service starts, then immediately quits when it receives a start request.

3. Start, stop, or restart both processes at once by going to %SPLUNK_HOME%\bin and typing

> splunk [start|stop|restart] 

Please check below URL:

http://docs.splunk.com/Documentation/Splunk/7.0.3/Admin/StartSplunk#Start_Splunk_Enterprise_on_Windo...

miteshvohra
Contributor

Assuming you have installed Splunk Enterprise in the default location ("C:\Program Files\Splunk"), which is also known as $SPLUNK_HOME path:

  1. Open Command Prompt
  2. Navigate to $SPLUNK_HOME\bin folder
  3. Issue the command splunk start and wait for the application to start.

Normally, Splunk Enterprise setup would create a service (should be listed in Services.msc console) and set it to start Automatically at OS boot.

Another 'legacy' service would be in 'Manual' mode and is not necessary to be started for Splunk to run properly. This service status can be safely ignored.

Look forward to your comments/feedback/vote.

Rgds, Mitesh.

FrankVl
Ultra Champion

Assuming you have Splunk running as a service, that would be:
net stop [service name] to stop it and net start [service name] to start it. For restart: net stop [service name] && net start [service name]

Service name will be either splunkd (for full splunk enterprise install / Heavy Forwarder) or splunkforwarder for a universal forwarder.

Or through the Services GUI (services.msc).

0 Karma
Get Updates on the Splunk Community!

Index This | I am a number, but when you add ‘G’ to me, I go away. What number am I?

March 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...

What’s New in Splunk App for PCI Compliance 5.3.1?

The Splunk App for PCI Compliance allows customers to extend the power of their existing Splunk solution with ...

Extending Observability Content to Splunk Cloud

Register to join us !   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to ...