Is there anyway to restart a missing splunkweb process WITHOUT a full splunk restart?
In one of the versions of 6.x splunkweb was integrated into the same process.
We have some situations in which splunkweb is not available. Root cause seems to be other heath check systems out of our control are causing the web process to crash. They utilise valid https calls so it think it seems to be a bug on the splunk side (the same monitors have been utilised since splunk v4.3).
This shows up as "web UI cannot be used until it is restarted" in _internal.
The old "splunk restart splunkweb" no longer works and the only fix seems to be a full "splunk restart".
I know you can run it in legacy mode to split them into two procsses but i'm trying to avoid doing this.
Is there anyway to start splunkweb on versions that utilise the new combined splunkd/splunkweb processes?
↧