topic Re: Splunk does not auto start (boot-start) in Security

Splunk does not auto start (boot-start)

hvazquez — Tue, 26 Dec 2023 19:44:16 GMT

I installed Splunk in RHEL 8.9. I set it up to boot-start, however, splunk does not automatically run after reboot. I followed the instructions within this document.

Configure Splunk Enterprise to start at boot time - Splunk Documentation

Re: Splunk does not auto start (boot-start)

richgalloway — Tue, 26 Dec 2023 22:05:42 GMT

What is the EXACT command you entered to enable boot-start? Saying you followed the instructions on a certain web page doesn't help if that page contains several different methods for doing the thing - we have no way of knowing which you used.

Re: Splunk does not auto start (boot-start)

isoutamo — Wed, 27 Dec 2023 08:30:42 GMT

In RHEL 8.9 you should use this version Enable boot-start on machines that run systemd

And before that you must change ownership of all files which splunk is using to user splunk (or what ever user you are using for run splunk).

r. Ismo

Re: Splunk does not auto start (boot-start)

hvazquez — Wed, 27 Dec 2023 12:38:31 GMT

Ismo,

Thanks for the guidance. The systemd worked.

V/r,

Hector