<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: /opt/splunk/bin/splunkd: error while loading shared libraries: libmongoc-1.0.so.0: cannot open shared object file: No such file or directory in Security</title>
    <link>https://community.splunk.com/t5/Security/opt-splunk-bin-splunkd-error-while-loading-shared-libraries/m-p/491540#M15349</link>
    <description>&lt;P&gt;Try to do rsync from old directory to new directory, probably this will solves the issue.&lt;/P&gt;

&lt;P&gt;Example command: rsync -avzh  &lt;/P&gt;</description>
    <pubDate>Fri, 22 May 2020 17:04:41 GMT</pubDate>
    <dc:creator>raghuramj</dc:creator>
    <dc:date>2020-05-22T17:04:41Z</dc:date>
    <item>
      <title>/opt/splunk/bin/splunkd: error while loading shared libraries: libmongoc-1.0.so.0: cannot open shared object file: No such file or directory</title>
      <link>https://community.splunk.com/t5/Security/opt-splunk-bin-splunkd-error-while-loading-shared-libraries/m-p/491539#M15348</link>
      <description>&lt;P&gt;I installed Splunk 8 splunk-8.0.0-1357bef0a7f6-linux-2.6-x86_64.rpm on RedHat 7.6 , it was installed under /opt later due to low space i added new disk and mount the new partition of new disk on /opt and moved all the data from original /opt to new /opt &lt;/P&gt;

&lt;P&gt;And i tried to restart the splunk server using  "systemctl restart splunk" it failed with this message&lt;/P&gt;

&lt;PRE&gt;&lt;CODE&gt;Job for splunk.service failed because the control process exited with error code. See "systemctl status splunk.service" and "journalctl -xe" for details

● splunk.service - SYSV: Splunk indexer service
   Loaded: loaded (/etc/rc.d/init.d/splunk; bad; vendor preset: disabled)
   Active: failed (Result: exit-code) since Wed 2019-11-20 10:34:15 +03; 30s ago
     Docs: man:systemd-sysv-generator(8)
  Process: 14675 ExecStop=/etc/rc.d/init.d/splunk stop (code=exited, status=0/SUCCESS)
  Process: 15594 ExecStart=/etc/rc.d/init.d/splunk start (code=exited, status=127)

Nov 20 10:34:15 logging splunk[15594]: open
Nov 20 10:34:15 logging splunk[15594]: Checking kvstore port [8191]: /opt/splunk/bin/splunkd: error while loading shared libraries: libmongoc-1.0.so.0: cannot open shared object file: No such file or directory
Nov 20 10:34:15 logging splunk[15594]: /opt/splunk/bin/splunkd: error while loading shared libraries: libmongoc-1.0.so.0: cannot open shared object file: No such file or directory
Nov 20 10:34:15 logging splunk[15594]: open
Nov 20 10:34:15 logging splunk[15594]: /opt/splunk/bin/splunkd: error while loading shared libraries: libmongoc-1.0.so.0: cannot open shared object file: No such file or directory
Nov 20 10:34:15 logging splunk[15594]: SSL certificate generation failed.
Nov 20 10:34:15 logging systemd[1]: splunk.service: control process exited, code=exited status=127
Nov 20 10:34:15 logging systemd[1]: Failed to start SYSV: Splunk indexer service.
Nov 20 10:34:15 logging systemd[1]: Unit splunk.service entered failed state.
Nov 20 10:34:15 logging systemd[1]: splunk.service failed.
&lt;/CODE&gt;&lt;/PRE&gt;

&lt;P&gt;I checked the permissions for /opt/splunk are set to splunk:splunk &lt;/P&gt;</description>
      <pubDate>Wed, 20 Nov 2019 08:43:55 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Security/opt-splunk-bin-splunkd-error-while-loading-shared-libraries/m-p/491539#M15348</guid>
      <dc:creator>omipenguin</dc:creator>
      <dc:date>2019-11-20T08:43:55Z</dc:date>
    </item>
    <item>
      <title>Re: /opt/splunk/bin/splunkd: error while loading shared libraries: libmongoc-1.0.so.0: cannot open shared object file: No such file or directory</title>
      <link>https://community.splunk.com/t5/Security/opt-splunk-bin-splunkd-error-while-loading-shared-libraries/m-p/491540#M15349</link>
      <description>&lt;P&gt;Try to do rsync from old directory to new directory, probably this will solves the issue.&lt;/P&gt;

&lt;P&gt;Example command: rsync -avzh  &lt;/P&gt;</description>
      <pubDate>Fri, 22 May 2020 17:04:41 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Security/opt-splunk-bin-splunkd-error-while-loading-shared-libraries/m-p/491540#M15349</guid>
      <dc:creator>raghuramj</dc:creator>
      <dc:date>2020-05-22T17:04:41Z</dc:date>
    </item>
  </channel>
</rss>

