https://community.splunk.com/t5/Installation/Splunk-failed-to-start-after-upgrade-to-4-3-on-Redhat-linux/m-p/47510#M747 <P>I am running Redhat Enterprise 5.5 on my systems. I currently upgraded to 4.2.5 with no problem. Today I tried to update a server with the Splunk 4.3. I also updated the *Nix app (4.5) on this server at the same time. When I go to start splunk I get this error after site checks and during the config checks. From reading so far, it could be a python error of some sort?<BR /><BR /> Error:<BR /> ImportError: No module named site</P> <P>**Update<BR /> I noticed this error on the attempt to upgrade 4.2.5 to 4.3:<BR /> error: unpacking of archive failed on file /opt/splunk/lib/python2.7/site-packages/splunk/appserver/mrsparkle/locale/zh_CH/LC_MESSAGES/messages.po;4f0efb70: cpio: read</P> Mon, 28 Sep 2020 10:17:45 GMT djfisher 2020-09-28T10:17:45Z https://community.splunk.com/t5/Installation/Splunk-failed-to-start-after-upgrade-to-4-3-on-Redhat-linux/m-p/47510#M747 <P>I am running Redhat Enterprise 5.5 on my systems. I currently upgraded to 4.2.5 with no problem. Today I tried to update a server with the Splunk 4.3. I also updated the *Nix app (4.5) on this server at the same time. When I go to start splunk I get this error after site checks and during the config checks. From reading so far, it could be a python error of some sort?<BR /><BR /> Error:<BR /> ImportError: No module named site</P> <P>**Update<BR /> I noticed this error on the attempt to upgrade 4.2.5 to 4.3:<BR /> error: unpacking of archive failed on file /opt/splunk/lib/python2.7/site-packages/splunk/appserver/mrsparkle/locale/zh_CH/LC_MESSAGES/messages.po;4f0efb70: cpio: read</P> Mon, 28 Sep 2020 10:17:45 GMT https://community.splunk.com/t5/Installation/Splunk-failed-to-start-after-upgrade-to-4-3-on-Redhat-linux/m-p/47510#M747 djfisher 2020-09-28T10:17:45Z https://community.splunk.com/t5/Installation/Splunk-failed-to-start-after-upgrade-to-4-3-on-Redhat-linux/m-p/47511#M748 <P>It looks like there is an integrity problem with previous RPM file "splunkforwarder-4.3-115073-linux-2.6-x86_64.rpm" I downloaded on the 11th of January 2011</P> <P>Trying to extract the file using rpm2cpio indicates the file was truncated:<BR /> rpm2cpio splunkforwarder-4.3-115073-linux-2.6-x86_64.rpm |cpio -idmv<BR /> ./opt/splunkforwarder/README-splunk.txt<BR /> ./opt/splunkforwarder/bin<BR /> ./opt/splunkforwarder/bin/bloom<BR /> ./opt/splunkforwarder/bin/btool<BR /> ./opt/splunkforwarder/bin/btprobe<BR /> ./opt/splunkforwarder/bin/bzip2<BR /> ./opt/splunkforwarder/bin/locktool<BR /> ./opt/splunkforwarder/bin/openssl<BR /> cpio: premature end of file</P> <P>I redownloaded the file from Splunk and compared md5sums, and it showed that the previous version I downloaded was corrupt. The newly downloaded file extracted correctly.</P> Tue, 17 Jan 2012 21:41:59 GMT https://community.splunk.com/t5/Installation/Splunk-failed-to-start-after-upgrade-to-4-3-on-Redhat-linux/m-p/47511#M748 wouterdutoit 2012-01-17T21:41:59Z