https://community.splunk.com/t5/Getting-Data-In/Unable-to-start-splunk-forwarder-service/m-p/61267#M12171 <P>Unable to start splunk forwarder service, below error returns.</P> <P>checking mgmt port [8089]: already bound<BR /> ERROR: The mgmt port [8089] is already bound. Splunk needs to use this port.<BR /> Would you like to change ports? [y/n]:</P> Thu, 14 Mar 2013 12:39:19 GMT catch_mili 2013-03-14T12:39:19Z https://community.splunk.com/t5/Getting-Data-In/Unable-to-start-splunk-forwarder-service/m-p/61267#M12171 <P>Unable to start splunk forwarder service, below error returns.</P> <P>checking mgmt port [8089]: already bound<BR /> ERROR: The mgmt port [8089] is already bound. Splunk needs to use this port.<BR /> Would you like to change ports? [y/n]:</P> Thu, 14 Mar 2013 12:39:19 GMT https://community.splunk.com/t5/Getting-Data-In/Unable-to-start-splunk-forwarder-service/m-p/61267#M12171 catch_mili 2013-03-14T12:39:19Z https://community.splunk.com/t5/Getting-Data-In/Unable-to-start-splunk-forwarder-service/m-p/61268#M12172 <P>As the error says, someone else (a splunk instance?) is hogging port 8089. Either kill them or switch to a different one.</P> Thu, 14 Mar 2013 12:49:17 GMT https://community.splunk.com/t5/Getting-Data-In/Unable-to-start-splunk-forwarder-service/m-p/61268#M12172 martin_mueller 2013-03-14T12:49:17Z https://community.splunk.com/t5/Getting-Data-In/Unable-to-start-splunk-forwarder-service/m-p/61269#M12173 <P>seems there is allready another service listening on 8089, eiter change the splunk port or the other software's port.</P> <P>try this:<BR /> netstat --tcp --udp --listening --program</P> Thu, 14 Mar 2013 12:50:51 GMT https://community.splunk.com/t5/Getting-Data-In/Unable-to-start-splunk-forwarder-service/m-p/61269#M12173 HansK 2013-03-14T12:50:51Z https://community.splunk.com/t5/Getting-Data-In/Unable-to-start-splunk-forwarder-service/m-p/61270#M12174 <P>I dont see 8089 used by any other application<BR /> Proto Recv-Q Send-Q Local Address Foreign Address State PID/Program name<BR /> tcp 0 0 <EM>:nrpe *:</EM> LISTEN 1321/xinetd<BR /> tcp 0 0 <EM>:nsca *:</EM> LISTEN 1321/xinetd<BR /> tcp 0 0 <EM>:http *:</EM> LISTEN 8343/httpd<BR /> tcp 0 0 localhost:oa-system</P> Thu, 14 Mar 2013 13:43:01 GMT https://community.splunk.com/t5/Getting-Data-In/Unable-to-start-splunk-forwarder-service/m-p/61270#M12174 catch_mili 2013-03-14T13:43:01Z https://community.splunk.com/t5/Getting-Data-In/Unable-to-start-splunk-forwarder-service/m-p/61271#M12175 <P>and like this?:<BR /> lsof -i TCP:8089</P> Thu, 14 Mar 2013 13:49:29 GMT https://community.splunk.com/t5/Getting-Data-In/Unable-to-start-splunk-forwarder-service/m-p/61271#M12175 HansK 2013-03-14T13:49:29Z https://community.splunk.com/t5/Getting-Data-In/Unable-to-start-splunk-forwarder-service/m-p/61272#M12176 <P>Hey catch_milli, try checking the running processes like:<BR /> ps aux | grep 8089<BR /> Regards Vince</P> Thu, 14 Mar 2013 22:09:35 GMT https://community.splunk.com/t5/Getting-Data-In/Unable-to-start-splunk-forwarder-service/m-p/61272#M12176 vincesesto 2013-03-14T22:09:35Z https://community.splunk.com/t5/Getting-Data-In/Unable-to-start-splunk-forwarder-service/m-p/61273#M12177 <P>Thanks. Vince.</P> Fri, 15 Mar 2013 07:40:19 GMT https://community.splunk.com/t5/Getting-Data-In/Unable-to-start-splunk-forwarder-service/m-p/61273#M12177 catch_mili 2013-03-15T07:40:19Z