topic Re: Why am I getting an error with MAC even after adding OPTIMISTIC? in Installation

Why am I getting an error installing Splunk on Mac OS High Sierra 10.13, even after adding OPTIMISTIC?

ZeinaIbrahim7 — Mon, 15 Jun 2020 21:30:16 GMT

Can someone please help me fix this issue. I am trying to install Splunk on my Mac OS High Sierra 10.13 but have been getting this:

homePath='/Applications/Splunk/var/lib/splunk/audit/db' of index=_audit on unusable filesystem.

Validating databases (splunkd validatedb) failed with code '1'. If you cannot resolve the issue(s) above after consulting documentation, please file a case online at http://www.splunk.com/page/submit_issue

I have tried to append OPTIMISTIC_ABOUT_FILE_LOCKING = 1to the splunk-launch.conf but it doesn't seem to make a difference.

Can someone please help?

Any help would be greatly appreciated.

Thanks

Re: Why am I getting an error with MAC even after adding OPTIMISTIC?

skoelpin — Sun, 28 Jan 2018 21:09:32 GMT

I've been running Splunk on Mac for years with no issues.

This may help.. I would run it in a test environment first before applying in production

https://answers.splunk.com/answers/585512/importerror-symbol-not-found-inflatevalidate-when.html

Re: Why am I getting an error with MAC even after adding OPTIMISTIC?

ZeinaIbrahim7 — Mon, 29 Jan 2018 08:57:36 GMT

Hi,
Thanks for your answer. I tried running the sudo commands as suggested in your link and I get this message:
rm: /opt/splunk/lib/libz.1.dylib: No such file or directory

This is strange because I can see the file libs.1.dylib but it still says that it doesn't exist.
Running out of ideas about how to fix this and start using Splunk...

Re: Why am I getting an error with MAC even after adding OPTIMISTIC?

skoelpin — Mon, 29 Jan 2018 18:10:35 GMT

Your Splunk home path is under /Applications/Splunk/ and you are trying under /opt/splunk. Change your directory to hit your home path

Re: Why am I getting an error with MAC even after adding OPTIMISTIC?

skoelpin — Thu, 01 Feb 2018 21:10:33 GMT

Did this work for you? @ZeinaIbrahim7