UJP - 技術情報2 : Running SplunkWeb in Legacy Mode by setting appServerPorts = 0 Splunk/7.3.1.1/mac/05appServerPort

I hope this helps.

不正IP報告数

Okan Sensor
 
メイン
ログイン
ブログ カテゴリ一覧

Page Top

はじめに anchor.png Edit

 Splunkをインストールし,nginxをフロントエンドにしてい他のだけれど,メッセージ通知があったので,それを改善する.

Page Top

メッセージを確認 anchor.png Edit

index.php?page=view&file=6416&SplunkDataDelete020.jpg

 リンクにアクセスすると,次のページに.

https://docs.splunk.com/Documentation/Splunk/7.3.1/ReleaseNotes/Deprecatedfeatures

 ここには次のように記載.

Running SplunkWeb in Legacy Mode by setting appServerPorts = 0 in web.conf has been deprecated. This was a temporary workaround for issues that are now resolved. Normal mode provides performance and configuration benefits.

 web.confのappServerPortsを0に設定する事は最新のバージョンでは廃止されていて,元々一時的なものだったようだ.  という事で,修復してみる.

Page Top

web.confの設定を変更 anchor.png Edit

 まずは変更するweb.confを確認.

$ cd /Applications/Splunk/etc/system/default🆑
$ ls -la web.conf🆑
-r--r--r-- 1 nobuaki wheel 53448 10 22 16:41 web.conf🈁
$

 web.confの中身を確認.

# list of ports to start python application servers on (although usually
# one port is enough)  Set to 0 to instead run the application server
# directly as the web front end on 'httpport', separate from splunkd.
#appServerPorts = 8065
appServerPorts = 0

 nginxをリバースプロキシにする際にappServerPorts=0を設定しているが,これを元に戻す.

# list of ports to start python application servers on (although usually
# one port is enough)  Set to 0 to instead run the application server
# directly as the web front end on 'httpport', separate from splunkd.
appServerPorts = 8065
#appServerPorts = 0

 元に戻したら,Splunkの再起動.

$ /Applications/Splunk/bin/splunk stop🆑
Stopping splunkweb...

Stopping splunkd...
Shutting down.  Please wait, as this may take a few minutes.

Stopping splunk helpers...

Done.

$

 停止できたら,起動する.

$ /Applications/Splunk/bin/splunk start🆑

Splunk> Finding your faults, just like mom.

Checking prerequisites...
	Checking http port [8000]: open
	Checking mgmt port [8089]: open
	Checking appserver port [127.0.0.1:8065]: open🈁
	Checking kvstore port [8191]: open
	Checking configuration... Done.
	Checking critical directories...	Done
	Checking indexes...
		Validated: _audit _internal _introspection _telemetry _thefishbucket history ipaccess_access ipaccess_error juno_syslog main
ujpadmin_access ujpadmin_error summary ujp_access ujp_error ujp_mail
ujp_mailaccess
	Done
	Checking filesystem compatibility...  Done
	Checking conf files for problems...
	Done
	Checking default conf files for edits...
	Validating installed files against hashes from '/Applications/Splunk/splunk-7.3.1.1-7651b7244cf2-darwin-64-manifest'
File '/Applications/Splunk/etc/system/default/web.conf' changed.
	Problems were found, please review your files and
move customizations to local
All preliminary checks passed.

Starting splunk server daemon (splunkd)...
Done


Waiting for web server at http://127.0.0.1:8000 to be available.... Done


If you get stuck, we're here to help.
Look for answers here: http://docs.splunk.com

The Splunk web interface is at http://gaia.local:8000

$

 appServerもポート8065で稼働したことが確認できた.

Page Top

Splunkにログインしてメッセージの確認 anchor.png Edit

 再起動後,ログインしてみる.

index.php?page=view&file=6417&SplunkDataDelete022.jpg

 エラーメッセージがなくなっていた.(新バージョンが出ているらしいが・・・)


Front page   Edit Diff Backup Upload Copy Rename Reload   New Page Page list Search Recent changes   Help   RSS of recent changes (RSS 1.0) RSS of recent changes (RSS 2.0) RSS of recent changes (RSS Atom)
Counter: 795, today: 2, yesterday: 0
Last-modified: 2019-10-22 (Tue) 17:05:17 (JST) (1024d) by nobuaki

広告スペース
Google