topic Why i'm getting this error??? in Security

Why i'm getting this error???

joseph254 — Tue, 15 Jan 2019 15:14:07 GMT

couldn't run "/root/splunk/bin/splunkd" "btool": Permission denied

couldn't run "/root/splunk/bin/splunkd" "btool": Permission denied

couldn't run "/root/splunk/bin/splunkd" "btool": Permission denied

Did not find "disabled" setting of "kvstore" stanza in server bundle.

Splunk> Map. Reduce. Recycle.

Checking prerequisites...

couldn't run "/root/splunk/bin/splunkd" "btool": Permission denied

Checking mgmt port [8089]: couldn't run "/root/splunk/bin/splunkd" "btool": Permission denied

open

couldn't run "/root/splunk/bin/splunkd" "btool": Permission denied

Checking configuration... Done.

execve: Permission denied

while running command /root/splunk/bin/splunkd

Validating databases (splunkd validatedb) failed with code '8'. If you cannot resolve the issue(s) above after consulting documentation, please file a case online at http://www.splunk.com/page/submit_issue

[root@localhost bin]#

Re: Why i'm getting this error???

dkeck — Tue, 15 Jan 2019 17:21:56 GMT

HI,

looks like you got this error on start up, make sure that the user who is running splunk got the ownership of $SPLUNK_HOME/splunk.

you can make sure with running chown -R user:group $SPLUNK_HOME/splunk

What version are you running?

Re: Why i'm getting this error???

martin_mueller — Wed, 16 Jan 2019 00:47:41 GMT

Also look at etc/splunk-launch.conf for SPLUNK_USER - if that's set to splunk but you're trying to run inside /root it'll end in tears.

Re: Why i'm getting this error???

joseph254 — Wed, 16 Jan 2019 09:37:46 GMT

i solved the problem is due to the permessions which was set to 0644 and i changed it to 0555 !
thank you for help 🙂

Re: Why i'm getting this error???

nikita_p — Wed, 16 Jan 2019 12:13:41 GMT

Hi,
You can try the solutions in splunk answers link below.
https://answers.splunk.com/answers/490134/how-to-resolve-issues-with-mongod-startup-such-as.html

Also you can try cleaning kvstore
https://answers.splunk.com/answers/237859/can-i-delete-all-data-from-a-kv-store-at-once.html

Re: Why i'm getting this error???

dkeck — Thu, 17 Jan 2019 06:50:22 GMT

Any luck with that? If it was helpfull please accept the answer, thank you 🙂