https://community.splunk.com/t5/Security/opt-splunk-bin-splunkd-error-while-loading-shared-libraries/m-p/169713#M14710 <P>Hi Guys.</P> <P>I just installed splunk into a server with Ubuntu 14 OS. When I run <CODE>sudo ./splunk start --accept-license</CODE> I get the exception:</P> <PRE><CODE>/opt/splunk/bin/splunkd: error while loading shared libraries: libmongoc-1.0.so.0: cannot open shared object file: No such file or directory /opt/splunk/bin/splunkd: error while loading shared libraries: libmongoc-1.0.so.0: cannot open shared object file: No such file or directory /opt/splunk/bin/splunkd: error while loading shared libraries: libmongoc-1.0.so.0: cannot open shared object file: No such file or directory Did not find "disabled" setting of "kvstore" stanza in server bundle. </CODE></PRE> <P>Some ideas for solving my problem?</P> Fri, 26 Dec 2014 21:40:02 GMT rauldevilla 2014-12-26T21:40:02Z https://community.splunk.com/t5/Security/opt-splunk-bin-splunkd-error-while-loading-shared-libraries/m-p/169713#M14710 <P>Hi Guys.</P> <P>I just installed splunk into a server with Ubuntu 14 OS. When I run <CODE>sudo ./splunk start --accept-license</CODE> I get the exception:</P> <PRE><CODE>/opt/splunk/bin/splunkd: error while loading shared libraries: libmongoc-1.0.so.0: cannot open shared object file: No such file or directory /opt/splunk/bin/splunkd: error while loading shared libraries: libmongoc-1.0.so.0: cannot open shared object file: No such file or directory /opt/splunk/bin/splunkd: error while loading shared libraries: libmongoc-1.0.so.0: cannot open shared object file: No such file or directory Did not find "disabled" setting of "kvstore" stanza in server bundle. </CODE></PRE> <P>Some ideas for solving my problem?</P> Fri, 26 Dec 2014 21:40:02 GMT https://community.splunk.com/t5/Security/opt-splunk-bin-splunkd-error-while-loading-shared-libraries/m-p/169713#M14710 rauldevilla 2014-12-26T21:40:02Z https://community.splunk.com/t5/Security/opt-splunk-bin-splunkd-error-while-loading-shared-libraries/m-p/169714#M14711 <P>running splunkd start instead of splunk start can cause libmongoc errors, per the answer here: <A href="https://answers.splunk.com/answers/46123/unable-to-install-splunk-4-3-1-119532-linux-i686.html">https://answers.splunk.com/answers/46123/unable-to-install-splunk-4-3-1-119532-linux-i686.html</A></P> Tue, 15 Dec 2015 02:44:07 GMT https://community.splunk.com/t5/Security/opt-splunk-bin-splunkd-error-while-loading-shared-libraries/m-p/169714#M14711 awkngrep 2015-12-15T02:44:07Z https://community.splunk.com/t5/Security/opt-splunk-bin-splunkd-error-while-loading-shared-libraries/m-p/169715#M14712 <P>Just in case someone else comes across this issue, the way I fixed this was to run 'sudo chown -R splunk:splunk /opt/splunk.</P> <P>The issue started when I ran a setcap command.</P> Sun, 17 Dec 2017 19:31:23 GMT https://community.splunk.com/t5/Security/opt-splunk-bin-splunkd-error-while-loading-shared-libraries/m-p/169715#M14712 dperre_splunk 2017-12-17T19:31:23Z https://community.splunk.com/t5/Security/opt-splunk-bin-splunkd-error-while-loading-shared-libraries/m-p/753856#M18521 <P>This saved my bacon! I started getting the same error after a `setcap` command to give Splunk permissions to access privileged ports (version 9.3.2). Thank you!</P><P>Edit: Interestingly, this un-did what setcap did, so Splunk still can't listen on privileged ports.&nbsp;</P> Thu, 02 Oct 2025 00:25:55 GMT https://community.splunk.com/t5/Security/opt-splunk-bin-splunkd-error-while-loading-shared-libraries/m-p/753856#M18521 HeavyHats 2025-10-02T00:25:55Z