https://community.splunk.com/t5/Splunk-Enterprise/Why-am-I-unable-to-start-the-splunk-service/m-p/214568#M8271 <P>Hi skuma30,<BR /> Which Splunk Version are you using and what Operative System?<BR /> I found the same problem on AIX 7.1 and I opened a case to Splunk Support.<BR /> There was a bug on all the versions available in december: 6.4.5, 6.5.1 and 6.3.8, that will be solved in the new minor releases of every Version.<BR /> I suggest to open a case to Splunk.<BR /> Bye.<BR /> Giuseppe </P> Wed, 04 Jan 2017 22:33:12 GMT gcusello 2017-01-04T22:33:12Z https://community.splunk.com/t5/Splunk-Enterprise/Why-am-I-unable-to-start-the-splunk-service/m-p/214565#M8268 <P>I tried to stop my splunk service, but it didn't work, so I killed the PID's so I can start splunk, but when I tried to start it later, it wouldn't start. When I entered splunk start, it is going a while with no output at all. It just hangs and there is nothing happening. Is there any solution for this that should be helpful for me?</P> Wed, 04 Jan 2017 21:42:07 GMT https://community.splunk.com/t5/Splunk-Enterprise/Why-am-I-unable-to-start-the-splunk-service/m-p/214565#M8268 skuma30 2017-01-04T21:42:07Z https://community.splunk.com/t5/Splunk-Enterprise/Why-am-I-unable-to-start-the-splunk-service/m-p/214566#M8269 <P>Hello,</P> <P>Try looking in splunkd.log. It contains information on what is occurring at the time which you are trying to start the service and while the service is running it will log events informing you of how it is running.</P> <P>Lets say you have it installed in linux, the path would be $SPLUNK_HOME/var/log/splunk/splunkd.log</P> <P>In the case of my personal instance I would use the following command to see what splunk is doing while it is starting up:</P> <P>tail -f /opt/splunk/var/log/splunk/splunkd.log</P> <P>Let us know what you find within this file.</P> <P>Regards,<BR /> supabuck</P> Wed, 04 Jan 2017 21:52:59 GMT https://community.splunk.com/t5/Splunk-Enterprise/Why-am-I-unable-to-start-the-splunk-service/m-p/214566#M8269 supabuck 2017-01-04T21:52:59Z https://community.splunk.com/t5/Splunk-Enterprise/Why-am-I-unable-to-start-the-splunk-service/m-p/214567#M8270 <P>Here are the last logs of splunkd.</P> <PRE><CODE>01-04-2017 19:34:57.551 +0000 ERROR TcpInputFd - SSL Error for fd from HOST:x, IP:x, PORT:51285 01-04-2017 19:35:57.605 +0000 ERROR TcpInputFd - SSL Error = error:1407609C:SSL routines:SSL23_GET_CLIENT_HELLO:http request 01-04-2017 19:35:57.605 +0000 ERROR TcpInputFd - ACCEPT_RESULT=-1 VERIFY_RESULT=0 01-04-2017 19:35:57.605 +0000 ERROR TcpInputFd - SSL Error for fd from HOST:x, IP:x, PORT:51709 </CODE></PRE> Wed, 04 Jan 2017 21:58:45 GMT https://community.splunk.com/t5/Splunk-Enterprise/Why-am-I-unable-to-start-the-splunk-service/m-p/214567#M8270 skuma30 2017-01-04T21:58:45Z https://community.splunk.com/t5/Splunk-Enterprise/Why-am-I-unable-to-start-the-splunk-service/m-p/214568#M8271 <P>Hi skuma30,<BR /> Which Splunk Version are you using and what Operative System?<BR /> I found the same problem on AIX 7.1 and I opened a case to Splunk Support.<BR /> There was a bug on all the versions available in december: 6.4.5, 6.5.1 and 6.3.8, that will be solved in the new minor releases of every Version.<BR /> I suggest to open a case to Splunk.<BR /> Bye.<BR /> Giuseppe </P> Wed, 04 Jan 2017 22:33:12 GMT https://community.splunk.com/t5/Splunk-Enterprise/Why-am-I-unable-to-start-the-splunk-service/m-p/214568#M8271 gcusello 2017-01-04T22:33:12Z https://community.splunk.com/t5/Splunk-Enterprise/Why-am-I-unable-to-start-the-splunk-service/m-p/214569#M8272 <P>Why were u stopping splunk??</P> <P>Any chance you were trying to enable ssl or install new certs??</P> Thu, 05 Jan 2017 00:06:23 GMT https://community.splunk.com/t5/Splunk-Enterprise/Why-am-I-unable-to-start-the-splunk-service/m-p/214569#M8272 mattymo 2017-01-05T00:06:23Z