https://community.splunk.com/t5/Installation/Why-the-error-while-installing-Splunk-UniversalForwarder-on/m-p/628519#M12301 <P>A new splunk user here.</P> <P>I am trying to install splunk UF on ubuntu. I get this error while trying to run the package for the first time:</P> <P><SPAN><SPAN class="">Could not open log file "/opt/splunkforwarder/var/log/splunk/first_install.log" for writing (2).</SPAN></SPAN></P> <P><SPAN>I saw some articles online but the suggestions did not resolve the issue for me.</SPAN></P> <P><SPAN>If I can get some step by step guide on resolving this, I will be grateful.</SPAN></P> <P><SPAN>Thank you.</SPAN></P> <P>&nbsp;</P> <P>&nbsp;</P> Thu, 26 Jan 2023 19:30:52 GMT twinnie 2023-01-26T19:30:52Z https://community.splunk.com/t5/Installation/Why-the-error-while-installing-Splunk-UniversalForwarder-on/m-p/628519#M12301 <P>A new splunk user here.</P> <P>I am trying to install splunk UF on ubuntu. I get this error while trying to run the package for the first time:</P> <P><SPAN><SPAN class="">Could not open log file "/opt/splunkforwarder/var/log/splunk/first_install.log" for writing (2).</SPAN></SPAN></P> <P><SPAN>I saw some articles online but the suggestions did not resolve the issue for me.</SPAN></P> <P><SPAN>If I can get some step by step guide on resolving this, I will be grateful.</SPAN></P> <P><SPAN>Thank you.</SPAN></P> <P>&nbsp;</P> <P>&nbsp;</P> Thu, 26 Jan 2023 19:30:52 GMT https://community.splunk.com/t5/Installation/Why-the-error-while-installing-Splunk-UniversalForwarder-on/m-p/628519#M12301 twinnie 2023-01-26T19:30:52Z https://community.splunk.com/t5/Installation/Why-the-error-while-installing-Splunk-UniversalForwarder-on/m-p/628542#M12302 <P>It would help to know what "suggestions" you've tried already, but it appears as though the file permissions are incorrect.&nbsp; Make sure all files in /opt/splunk are owned by user 'splunk' (or another non-root user that will be running the UF).</P> Thu, 26 Jan 2023 20:16:59 GMT https://community.splunk.com/t5/Installation/Why-the-error-while-installing-Splunk-UniversalForwarder-on/m-p/628542#M12302 richgalloway 2023-01-26T20:16:59Z