topic Missing Folders/Files in Splunk Enterprise

Missing Folders/Files

shinobu — Fri, 16 Apr 2021 14:55:01 GMT

Hello,

I'm quite new to Splunk and recently installed an instance on a debian machine. When trying to upload a log File i got the Issue that the depth_limit in limits.conf was not big enough to execute the operation.

The documentation states that the default file is located under $SPLUNK_HOME/etc/system/default/ und the custom configurations are stored under $SPLUNK_HOME/etc/system/local/.

But neither of these folders exist inside the splunk home directory. Any ideas why and what i can do to achive it?

I hope you can help me out.

Thank you in advance.

Re: Missing Folders/Files

ericjorgensenjr — Fri, 16 Apr 2021 15:38:01 GMT

Which method did you use to install Splunk, and where are you looking for $SPLUNK_HOME? Typically Splunk is installed in the /opt directory, so the paths will expand to /opt/splunk/etc/system/default/ and /opt/splunk/etc/system/local/

Re: Missing Folders/Files

shinobu — Fri, 16 Apr 2021 15:41:13 GMT

Thank you for your fast reply. I used deb installation package and I was looking the in paths you mentioned.

Re: Missing Folders/Files

ericjorgensenjr — Fri, 16 Apr 2021 15:56:27 GMT

It sounds to me like your install didn't successfully take place. What do you get when you run:

dpkg --status splunk