topic Re: splunk reload deployment server error in Splunk Enterprise

splunk reload deployment server error

jadengoho — Mon, 07 May 2018 09:40:49 GMT

Hi, just want to ask why im getting this error and how to make this right :

An error occurred: Could not create Splunk settings directory at '/root/.splunk'.

Ialways get that when i am reloading the Splunk Deployment server

Re: splunk reload deployment server error

jadengoho — Mon, 07 May 2018 09:42:07 GMT

I see this answer but i cant really understand it : https://answers.splunk.com/answers/211892/could-not-create-splunk-settings-directory-at-root.html
can somebody tell me the procedure ?

Re: splunk reload deployment server error

xpac — Mon, 07 May 2018 10:12:40 GMT

It's basically: Splunk is not running as root (which is good), but you're logged in as root (which is not so good).
When you try to login (which is required to reload the deployment server), Splunk saves your login (which would be a cookie if you we're using a browser) in a folder in your home directory (/root/.splunk/). But as Splunk does not run as root, it has no permissions to do that, therefore the error message.

Solution: Do not work as root, especially not while editing files on a non-root Splunk, it will bring you into trouble.
I'd suggest using a normal user, you could use the user Splunk is running at.

Hope that helps!

Re: splunk reload deployment server error

jadengoho — Mon, 07 May 2018 10:22:38 GMT

How can i do that in CLI ?
to run the command ./splunk reload deploy-server

Re: splunk reload deployment server error

jadengoho — Tue, 29 Sep 2020 19:21:51 GMT

./splunk reload deploy-server
ERROR: Couldn't determine $SPLUNK_HOME or $SPLUNK_ETC; perhaps one should be set in environment

Re: splunk reload deployment server error

jadengoho — Tue, 29 Sep 2020 19:21:54 GMT

if is do SUDO = An error occurred: Could not create Splunk settings directory at '/root/.splunk'.
if no SUDO =Couldn't determine $SPLUNK_HOME or $SPLUNK_ETC; perhaps one should be set in environment
how can i reload the deployment server ?

Re: splunk reload deployment server error

xpac — Mon, 07 May 2018 13:11:21 GMT

Try this, it depends on your system environment:

source /opt/splunk/bin/setSplunkEnv

That will set the variables and also allow you to issue Splunk commands from any folder, just by starting with splunk.... You could then put that line into your .bashrc or .bash_profile or whatever your system runs when you login. 😉

Re: splunk reload deployment server error

jadengoho — Tue, 08 May 2018 03:40:54 GMT

That doesn't work on my side.

But I Finally know the answer :
We are login to our Username (e.g: FirstName.LastName)
and for us to do the command

./splunk reload deploy-server

We need to log in as a user in the splunk :

sudo su splunk
./splunk reload deploy-server
(this prompt me to enter my splunk credentials) 
and then it will RUN the command

Re: splunk reload deployment server error

orezaie — Mon, 13 Oct 2025 12:32:02 GMT

For your information:
To resolve the issue, please log in to Splunk and reload the deploy server:

$ /opt/splunk/bin/splunk login Splunk username: admin # (use your actual username) Password: $ /opt/splunk/bin/splunk reload deploy-server -class XYZ

This will reload the specified server class(es).

Re: splunk reload deployment server error

orezaie — Mon, 13 Oct 2025 12:36:05 GMT

Here is the best answer:
To resolve the issue, please log in to Splunk and reload the deploy server:

$ /opt/splunk/bin/splunk login

Splunk username: admin # (use your actual username)

Password:

$ /opt/splunk/bin/splunk reload deploy-server -class XYZ

This will reload the specified server class(es).

Re: splunk reload deployment server error

orezaie — Mon, 13 Oct 2025 12:37:09 GMT

Here is the best answer:
To resolve the issue, please log in to Splunk and reload the deploy server:

$ /opt/splunk/bin/splunk login

Splunk username: admin # (use your actual username)

Password:

$ /opt/splunk/bin/splunk reload deploy-server -class XYZ

This will reload the specified server class(es).