Splunk Apps » Website Input

h1. Troubleshooting

Below is some information that is useful if you are having problems with web_input:

h2. SplunkWeb cannot start

This can happen when a browser started by Website Input will not close. To fix this, look for running instances of the browser (e.g. Firefox) and the driver (e.g. geckodriver) and close them. Then restart Splunk.

h2. Cannot execute Firefox on Linux

This may be due to Linux permissions. To debug this, run the following search:

<pre>

index=_internal source=*/geckodriver.log

</pre>

You may see messages like this:

<pre>

1560552380246   mozrunner::runner       INFO    Running command: "/usr/bin/firefox" "-marionette" "-foreground" "-no-remote" "-profile" "/tmp/rust_mozprofile.gu7Y8H5bTvln"

Running Firefox as root in a regular user's session is not supported.  ($HOME is /home/luke which is owned by luke.)

</pre>

You may want to run the app under an another account.nAlternatively, see https://askubuntu.com/questions/1037052/running-firefox-as-root-in-a-regular-users-session-is-not-supported-xauthori for how to fix this.

h2. Other issues

You can use the views under the "Health" section of the navigation to identify potential problems.

Alternatively, you can run the following search and look for anything that looks like an error

<pre>

index=_internal sourcetype=web_input_modular_input NOT (DEBUG OR INFO)

</pre>

If no related errors are seen, then try looking at all of the logs and see if the input indicates that it is working:

<pre>

index=_internal sourcetype=web_input_modular_input

</pre>