Hello,
For some reason, splunkweb fails to start in first, my version is 4.2.1 any ideas where i can look for to troubleshoot:
This appears to be your first time running this version of Splunk.
Copying '/opt/splunk/etc/openldap/ldap.conf.default' to '/opt/splunk/ etc/openldap/ldap.conf'.
Generating RSA private key, 1024 bit long modulus
............++++++
...............++++++
e is 65537 (0x10001)
writing RSA key
Generating RSA private key, 1024 bit long modulus
........................++++++
.......................................++++++
e is 65537 (0x10001)
writing RSA key
Moving '/opt/splunk/share/splunk/search_mrsparkle/modules.new' to '/o pt/splunk/share/splunk/search_mrsparkle/modules'.
Splunk> CSI: Logfiles.
Checking prerequisites...
Checking http port [8000]: open
Checking mgmt port [8089]: open
Checking configuration... Done.
Checking index directory...
Creating: /opt/splunk/var/lib/splunk
Creating: /opt/splunk/var/lib/splunk/appserver/i18n
Creating: /opt/splunk/var/lib/splunk/appserver/modules/static /css
Creating: /opt/splunk/var/run/splunk
Creating: /opt/splunk/var/run/splunk/upload
Creating: /opt/splunk/var/spool/splunk
Creating: /opt/splunk/var/spool/dirmoncache
Creating: /opt/splunk/var/lib/splunk/authDb
Creating: /opt/splunk/var/lib/splunk/hashDb
Validated databases: _audit _blocksignature _internal _thefis hbucket history main summary
Done
New certs have been generated in '/opt/splunk/etc/auth'.
Success
Checking conf files for typos...
All preliminary checks passed.
Starting splunk server daemon (splunkd)...
[ OK ]
Done.Starting splunkweb... /opt/splunk/etc/auth/splunkweb does not ex ist. Will create
Generating certs for splunkweb server
Generating a 1024 bit RSA private key
.....++++++
...........................++++++
writing new private key to 'privKeySecure.pem'
-----
Signature ok
subject=/CN=xxx.xxx@xxx/O=SplunkUser
Getting CA Private Key
writing RSA key
Error starting splunkweb. [FAILED]
I read topic: http://www.splunk.com/support/forum:SplunkAdministration/2625
I have startwebserver = 1 in /opt/splunk/etc/system/local/web.conf . Please help me.
Thanks
... View more