The venerable old-skool Splunk forums are now closed. Feel free to search for old content here, but new posts are no longer supported.

Instead, please visit the thriving community at answers.splunk.com to ask and answer questions about your Splunk deployment and how to get the most out of it.

Forums: SplunkGeneral: Splunkd vs. SplunkWeb

Previous Topic: MacOS 10.6 64-bit support?  |   Next Topic: Search Results Not Displayed in Outlook?


Posts 1–3 of 3
1
posted by: wpeters  |  posts
date: July 5, 2010
permalink

Hi Splunkers,

here is an odd issue. I have just installed 4.1.3 on my Win2008 64bit System with the services using an domain account we have created for Splunk. Now when i start the Splunkd service all is fine until i start the SplunkWeb service, at which the Splunkd service terminates. If I then restart the Splunkd service then the Splunkweb service immediately terminates. I can reproduce the issue at will and the end result is that i cannot run the Splunkd & SplunkWeb services at the same time.

any ideas?

cheers,
William

2
posted by: wpeters  |  posts
date: July 5, 2010
permalink

found the error. the services were actually not starting - despite showing as 'started' in the service list. i changed the logon user back to the localsystem user and everything started perfectly - i suspect an issue with the domain user. i know that the user has 'logon as a service' rights but not sure about additional requirements...

3
posted by: wpeters  |  posts
date: July 5, 2010
permalink

final note: putting the domain user in the local administrators group solved the issue - i suppose it was more of an RTFM problem....