Getting Data In

AIX上のUFを起動するとSplunkWebサービスが起動できない旨のメッセージが表示される

CurryPan
Communicator

AIX上にあるUFを起動すると下記のエラーメッセージが splunkd.logに出力されます。

WARN DC:DeploymentClient - Restarting Splunkd... 
WARN Restarter - Restarting splunkweb; SRC did not 'stopsrc splunkweb' on our behalf: exit code=1 
WARN Restarter - Restarting splunkweb; gave up waiting for splunkweb.pid to disappear 
ERROR Restarter - Restarting splunkweb; SRC did not 'startsrc splunkweb' on our behalf: exit code=1

web.conf でsplunkwebサービスを無効にしても問題が解消しません。

[settings] 
# enable/disable the appserver 
startwebserver = 1 

解決方法をご教示ください。

goelli
Communicator

Looks like the same Problem here: https://answers.splunk.com/answering/492028/view.html
Splunk states, that the message can be ignored and they are still working on a fix.

A workaround might be to disable Boot-Start of the Forwarder.

0 Karma

CurryPan
Communicator

本件は製品の不具合です。
Splunk ver. 6.2.3 及び 6.1.9にて修正されております。

なお、本メッセージについては、製品使用上の問題はありませんので、無視して構いません。

Get Updates on the Splunk Community!

Stay Connected: Your Guide to May Tech Talks, Office Hours, and Webinars!

Take a look below to explore our upcoming Community Office Hours, Tech Talks, and Webinars this month. This ...

They're back! Join the SplunkTrust and MVP at .conf24

With our highly anticipated annual conference, .conf, comes the fez-wearers you can trust! The SplunkTrust, as ...

Enterprise Security Content Update (ESCU) | New Releases

Last month, the Splunk Threat Research Team had two releases of new security content via the Enterprise ...