Hi Splunk,
The splunkweb service is not starting. Here is entry in the log:
Any ideas?
2016-07-19 14:42:13,921 ERROR [578e7485507f6a9721b510] root:816 - Unable to start splunkweb
2016-07-19 14:42:13,921 ERROR [578e7485507f6a9721b510] root:817 - No module named lookupfiles
Traceback (most recent call last):
File "/opt/splunk/lib/python2.7/site-packages/splunk/appserver/mrsparkle/root.py", line 101, in
from controllers.top import *
File "/opt/splunk/lib/python2.7/site-packages/splunk/appserver/mrsparkle/controllers/top.py", line 13, in
from admin import AdminController
File "/opt/splunk/lib/python2.7/site-packages/splunk/appserver/mrsparkle/controllers/admin.py", line 17, in
from splunk.appserver.mrsparkle.controllers.appinstall import AppInstallController
File "/opt/splunk/lib/python2.7/site-packages/splunk/appserver/mrsparkle/controllers/appinstall.py", line 9, in
from splunk.appserver.mrsparkle.lib import cached, module
File "/opt/splunk/lib/python2.7/site-packages/splunk/appserver/mrsparkle/lib/module.py", line 465, in
moduleMapper = ModuleMapper()
File "/opt/splunk/lib/python2.7/site-packages/splunk/appserver/mrsparkle/lib/module.py", line 79, in __init__
self.installedModules = self.getInstalledModules()
File "/opt/splunk/lib/python2.7/site-packages/splunk/appserver/mrsparkle/lib/module.py", line 24, in helper
return f(*a, **kw)
File "/opt/splunk/lib/python2.7/site-packages/splunk/appserver/mrsparkle/lib/module.py", line 448, in getInstalledModules
mods = self.getModuleList(root)
File "/opt/splunk/lib/python2.7/site-packages/splunk/appserver/mrsparkle/lib/module.py", line 33, in helper
return f(*a, **kw)
File "/opt/splunk/lib/python2.7/site-packages/splunk/appserver/mrsparkle/lib/module.py", line 219, in getModuleList
mod = __import__(modname)
File "/opt/splunk/etc/slave-apps/SA-Utils/appserver/modules/SOLNLookupEditor/SOLNLookupEditor.py", line 22, in
import lookupfiles
ImportError: No module named lookupfiles
2016-07-19 15:20:21,793 INFO [578e7d75b77f9f6aa274d0] __init__:168 - Using default logging config file: /opt/splunk/etc/log.cfg
2016-07-19 15:20:21,794 INFO [578e7d75b77f9f6aa274d0] __init__:206 - Setting logger=splunk level=INFO
2016-07-19 15:20:21,794 INFO [578e7d75b77f9f6aa274d0] __init__:206 - Setting logger=splunk.appserver level=INFO
2016-07-19 15:20:21,794 INFO [578e7d75b77f9f6aa274d0] __init__:206 - Setting logger=splunk.appserver.controllers level=INFO
2016-07-19 15:20:21,795 INFO [578e7d75b77f9f6aa274d0] __init__:206 - Setting logger=splunk.appserver.controllers.proxy level=INFO
2016-07-19 15:20:21,795 INFO [578e7d75b77f9f6aa274d0] __init__:206 - Setting logger=splunk.appserver.lib level=WARN
2016-07-19 15:20:21,795 INFO [578e7d75b77f9f6aa274d0] __init__:206 - Setting logger=splunk.pdfgen level=INFO
I saw this about replacing "apps" with "slave-apps" in make_splunkhome_path function in files below?
https://answers.splunk.com/answers/305921/why-is-splunkweb-is-not-starting-on-indexers-with.html
I saw this about replacing "apps" with "slave-apps" in make_splunkhome_path function in files below?
https://answers.splunk.com/answers/305921/why-is-splunkweb-is-not-starting-on-indexers-with.html
Thanks Heff.
I followed the post above, restarted splunk on the indexer that the web service was failing, and all is well.
Couple of things. The other indexer in the cluster didn't experience this issue when cluster bundle was applied to both. It was the NetApp ONTAP app (SA-Utils, SA-Hydra) that I was pushing when I ran into this issue.
NOTE:
There are dozens of files in these SAs that contain the word "apps" and not "slave-apps" when defining path.