After upgrading Splunk App for Windows Infrastructure to latest version from splunkbase (https://splunkbase.splunk.com/app/1680/) it asked for a restart of splunk. I accepted the restart and then alot of time went by while I was waiting for it to complete the restart.
After some time I tryed to access splunk in another browsertab, but got an error connection refused.
I cheched the server and found that the splunkd and splunkweb services where not running, but I'm not able to start them either.
Splunkd - tryes to start but seems to stop imideatly as it starts. Windows gives an error box stating that. I can not see it change status to running before the error box appears.
Splunkweb - gives an error 1053, assuming that is sort of normal as splunkd isn't running.
I have serched thru alot of simular problems here on answers and tryed several solutions with no luck.
I have restartet server several times.
I can not find anything matching timestaps in logs in the \var\log\splunk\ folder
Can not find anything in event viewer on the server that seems related.
Any suggestions?
Running Splunk Enterprise on a Windows Server,
One server for everything.
↧