https://community.splunk.com/t5/Getting-Data-In/Unable-to-Start-Splunk-Service-on-Windows-failed-with-ERROR/m-p/123357#M25465 <P>I will suggest you to try steps recommend below, before performing these steps please stop the splunk service.</P> <P>From windows explorer- navigate to the Splunk folder and right click on the Splunk Properties<BR /> In the ‘Splunk Properties’, click on tab ‘Security’<BR /> On the Security Tab, click on “Advanced”.<BR /> Now you will be in context of ‘Advanced Security Setting for Splunk”, here click on ‘Owner’.</P> <P>You will see the list of owner, here click ‘Edit’, where you can pick the user who will run the splunk service.<BR /> Once you pickup the user , select check box “Replace owner on sub containers and objects” and Apply.<BR /> Please restart the Splunk service and see if it helps.</P> Tue, 08 Apr 2014 06:41:33 GMT rbal_splunk 2014-04-08T06:41:33Z https://community.splunk.com/t5/Getting-Data-In/Unable-to-Start-Splunk-Service-on-Windows-failed-with-ERROR/m-p/123356#M25464 <P>We are able to start splunk services - But getting following error while starting the services in Heavy Forwarder </P> <P>"ERROR ConfObjectManagerDB - Cannot initialize: D:\Program Files\Splunk\etc\apps\ <BR /> learned\metadata\default.meta: The operation completed successfully." </P> <P>When I tried to launch the file default.meta file - It gives me an error as access denied. I am using Admin account to launch the file - Getting same message even after stopping the splunk services. </P> <P>Tried to replace file from back up - still getting message as - I don’t have access to the perform the operation. </P> Tue, 08 Apr 2014 06:40:27 GMT https://community.splunk.com/t5/Getting-Data-In/Unable-to-Start-Splunk-Service-on-Windows-failed-with-ERROR/m-p/123356#M25464 rbal_splunk 2014-04-08T06:40:27Z https://community.splunk.com/t5/Getting-Data-In/Unable-to-Start-Splunk-Service-on-Windows-failed-with-ERROR/m-p/123357#M25465 <P>I will suggest you to try steps recommend below, before performing these steps please stop the splunk service.</P> <P>From windows explorer- navigate to the Splunk folder and right click on the Splunk Properties<BR /> In the ‘Splunk Properties’, click on tab ‘Security’<BR /> On the Security Tab, click on “Advanced”.<BR /> Now you will be in context of ‘Advanced Security Setting for Splunk”, here click on ‘Owner’.</P> <P>You will see the list of owner, here click ‘Edit’, where you can pick the user who will run the splunk service.<BR /> Once you pickup the user , select check box “Replace owner on sub containers and objects” and Apply.<BR /> Please restart the Splunk service and see if it helps.</P> Tue, 08 Apr 2014 06:41:33 GMT https://community.splunk.com/t5/Getting-Data-In/Unable-to-Start-Splunk-Service-on-Windows-failed-with-ERROR/m-p/123357#M25465 rbal_splunk 2014-04-08T06:41:33Z