topic Re: After downloading the free trial, why do I get the error "cannot accept license agreement"? in Installation

After downloading the free trial, why do I get the error "cannot accept license agreement"?

brentpulmans — Mon, 15 Jun 2020 21:06:04 GMT

For a project in our company, I would like to test whether Splunk would be a good choice. I downloaded the free trial and tried to start it, but after the License Agreement is shown, I get the following error after entering 'y':

Warning: cannot create "opt/splunk/etc/licenses/download-trial"

I am using an Ubuntu 16.04 server. For testing, I work with a virtual machine. The command I used to start Splunk is the following: sudo ./splunk start

What might be wrong?

Thanks for your help!

Re: After downloading the free trial, why do I get the error "cannot accept license agreement"?

mayurr98 — Thu, 12 Apr 2018 08:58:59 GMT

can you try this

sudo ./splunk start --accept-license ?

Re: After downloading the free trial, why do I get the error "cannot accept license agreement"?

p_gurav — Thu, 12 Apr 2018 09:00:28 GMT

Can you try :

sudo ./splunk start --accept-license

Re: After downloading the free trial, why do I get the error "cannot accept license agreement"?

brentpulmans — Thu, 12 Apr 2018 09:03:11 GMT

When using --accept-license, i receive two more warnings unfortunately:

Warning: cannot create "opt/splunk/var/log/splunk"

Warning: cannot create "opt/splunk/var/log/introspection"
Warning: cannot create "opt/splunk/etc/licenses/download-trial"

Re: After downloading the free trial, why do I get the error "cannot accept license agreement"?

mayurr98 — Thu, 12 Apr 2018 09:05:30 GMT

Well, given permissions to this folder?

Re: After downloading the free trial, why do I get the error "cannot accept license agreement"?

brentpulmans — Thu, 12 Apr 2018 09:10:05 GMT

Yes, indeed

Re: After downloading the free trial, why do I get the error "cannot accept license agreement"?

mayurr98 — Thu, 12 Apr 2018 09:13:48 GMT

As you have installed it in VM, at the splunk mount point do you have read/write access to splunk folder?

Re: After downloading the free trial, why do I get the error "cannot accept license agreement"?

brentpulmans — Thu, 12 Apr 2018 09:19:48 GMT

I just checked it, and i indeed have read, write and execute rights.

Re: After downloading the free trial, why do I get the error "cannot accept license agreement"?

p_gurav — Thu, 12 Apr 2018 09:23:36 GMT

What command you are using to install splunk?

Re: After downloading the free trial, why do I get the error "cannot accept license agreement"?

brentpulmans — Tue, 29 Sep 2020 19:01:08 GMT

I first downloaded everything:

Next, I renamed the file splunk-7.0.3-fa31da744b51-Linux-x86_64.tgz to splunk.tgz using mv splunk-7.0.3-fa31da744b51-Linux-x86_64.tgz splunk.tgz

These were the next commands:
sudo tar xvzf splunk.tgz -C /opt
cd /opt/splunk/bin
sudo ./splunk start

I followed the video which you get after downloading: https://www.splunk.com/en_us/download/splunk-enterprise/thank-you-enterprise.html

Re: After downloading the free trial, why do I get the error "cannot accept license agreement"?

brentpulmans — Tue, 29 Sep 2020 19:01:14 GMT

I followed all commands from the video Splunk provides: https://www.splunk.com/en_us/download/splunk-enterprise/thank-you-enterprise.html

First of all
sudo wget -O splunk-7.0.3-fa31da744b51-Linux-x86_64.tgz 'https://www.splunk.com/bin/splunk/DownloadActivityServlet?architecture=x86_64&platform=linux&version=7.0.3&product=splunk&filename=splunk-7.0.3-fa31da744b51-Linux-x86_64.tgz&wget=true'

Next I renamed it to make it easier to recognize:
mv splunk-7.0.3-fa31da744b51-Linux-x86_64.tgz splunk.tgz

Re: After downloading the free trial, why do I get the error "cannot accept license agreement"?

FrankVl — Thu, 12 Apr 2018 10:28:02 GMT

Can you perhaps summarize the steps you took to install Splunk?

Did you perhaps configure Splunk to run under a normal, non-root account (e.g. splunk), while you created the Splunk directory with root, or some other account? Such that when Splunk starts (even when starting it with sudo) it runs as the configured user which does not have permissions?

Just check what the splunk process runs under after starting it and then make sure the splunk folder is owned by that account (and respective group).

Re: After downloading the free trial, why do I get the error "cannot accept license agreement"?

brentpulmans — Tue, 29 Sep 2020 19:01:17 GMT

sudo wget -O splunk-7.0.3-fa31da744b51-Linux-x86_64.tgz 'https://www.splunk.com/bin/splunk/DownloadActivityServlet?architecture=x86_64&platform=linux&version=7.0.3&product=splunk&filename=splunk-7.0.3-fa31da744b51-Linux-x86_64.tgz&wget=true'
sudo tar xvzf splunk-7.0.3-fa31da744b51-Linux-x86_64.tgz -C /opt
cd /opt/splunk/bin
sudo ./splunk start
(accept license by entering y and pressing enter)

Re: After downloading the free trial, why do I get the error "cannot accept license agreement"?

p_gurav — Thu, 12 Apr 2018 11:03:01 GMT

Can you check user and owner of Splunk directory?

Re: After downloading the free trial, why do I get the error "cannot accept license agreement"?

brentpulmans — Thu, 12 Apr 2018 11:12:44 GMT

Uid: 506/UNKNOWN

Re: After downloading the free trial, why do I get the error "cannot accept license agreement"?

p_gurav — Thu, 12 Apr 2018 11:20:52 GMT

Can you try:

chown -R root:root /opt/splunk

Re: After downloading the free trial, why do I get the error "cannot accept license agreement"?

brentpulmans — Thu, 12 Apr 2018 11:29:28 GMT

This is what I'm getting now:

Re: After downloading the free trial, why do I get the error "cannot accept license agreement"?

Richfez — Thu, 12 Apr 2018 11:36:49 GMT

The tar file for Splunk uses a user with userid #506 if I recall correctly, and that UID doesn't exist on your system. At least, it's never existed on any of MY systems. 🙂

You can see this if you

cd /opt
ls -l

When you'll do that, you'll see that the user listed isn't valid and shows a number instead of a name. (If you `ls -l in another folder you'll see real names for things).

The docs are missing a step. Since you are running as root (which is not ideal, but it will work well enough in a test environment), you should be able to add one little step in the middle.

sudo tar xvzf splunk-7.0.3-fa31da744b51-Linux-x86_64.tgz -C /opt
chown -R root:root /opt/splunk
cd /opt/splunk/bin
sudo ./splunk start

To be honest, I don't really know if user:group root:root is really correct, you may want root:adm or something, because I've never installed as root for security reasons. It probably won't matter much, but I would suggest looking at some other system binaries owned by root and seeing what user:group they're in and mimic that for Splunk.

Happy Splunking!
-Rich

Re: After downloading the free trial, why do I get the error "cannot accept license agreement"?

Padillaz — Tue, 25 May 2021 07:32:34 GMT

Same just happened to me, I'm a Cybersecurity student, running Splunk in a VM for my digital forensics course. I just used the command "sudo ./splunk start" and I got past the license agreement.

Re: After downloading the free trial, why do I get the error "cannot accept license agreement"?

Nig3y — Mon, 03 Jun 2024 13:21:39 GMT

The above suggestions are great, but what worked on my end was simply scrolling to the end of the user agreement ( I think the Splunk creators want us to read through it). I did not have to change anything in any of the files listed in the first suggestion'