topic Re: Unable to boot start splunk during installation of splunk forwarder 6.2.2 in Installation

Unable to boot start splunk during installation of splunk forwarder 6.2.2

nirmalya2006 — Sat, 04 Mar 2017 11:36:25 GMT

Hi All

I quite new to splunk and I am trying to install splunk universal forwarder 6.2.2 on linux systems.
Below are the commands that I have in a shell script which is executed by root user.

tar -zxvf splunkuniversalforwarder-6.2.2-255606-Linux-x86_64.gz -C /opt
groupadd splunk
useradd -g splunk splunk
chown -R splunk:splunk /opt/splunkforwarder
export SPLUNK_HOME=/opt/splunkforwarder
export PATH=$SPLUNK_HOME/bin:$PATH
splunk enable boot-start -user splunk --accept-license --answer-yes
service splunk start

The script is executing perfectly till step 6.
On step 7 the script gets hung and there is no output and neither the script proceeds ahead.

I am unable to understand if this is an issue with the linux server where I am trying to install the forwarder or something is wrong with the installer.
Can someone please help me on this.

Thanks
Nirmalya

Re: Unable to boot start splunk during installation of splunk forwarder 6.2.2

nirmalya2006 — Sat, 04 Mar 2017 11:39:48 GMT

I also tried to manually execute the same command but it remains hung and I had to terminate the execution
splunk enable boot-start -user splunk --accept-license --answer-yes

Re: Unable to boot start splunk during installation of splunk forwarder 6.2.2

gcusello — Sat, 04 Mar 2017 12:06:27 GMT

Hi nirmalya2006,
instead of item 7 and 8 you should run the following commands

cd /opt/splunkuniversalforwarder/bin
./splunk start --accept-license
splunk enable boot-start -user splunk

In addition I suggest to use rpm command because in this way you avoid items 2,3,4,5 and 6
you have only three items:

rpm -i splunkuniversalforwarder-6.2.2-255606-Linux-x86_64.rpm
cd /opt/splunkuniversalforwarder/bin
./splunk start --accept-license
splunk enable boot-start -user splunk

Every way see http://docs.splunk.com/Documentation/Forwarder/6.5.2/Forwarder/Installanixuniversalforwarder

Bye.
Giuseppe

Re: Unable to boot start splunk during installation of splunk forwarder 6.2.2

woodcock — Sun, 05 Mar 2017 01:49:36 GMT

You have an extra ./splunk start --accept-license.

Re: Unable to boot start splunk during installation of splunk forwarder 6.2.2

gcusello — Sun, 05 Mar 2017 10:42:41 GMT

yes sorry! cut and past error!
Bye.
Giuseppe

Re: Unable to boot start splunk during installation of splunk forwarder 6.2.2

nirmalya2006 — Tue, 21 Mar 2017 22:30:53 GMT

Well for some reason ./splunk start --accept-license or splunk enable boot-start -user splunk was not working on this particular Linux server. We are yet to figure out the reason.
So we had to use service splunk enable boot-start -user splunk and service splunk start to get the thing working.

For other cases we were getting error message
For ./splunk start --accept-license we got Unrecognized service
For splunk enable boot-start -user splunk the command execution went to hung state

Good thing is the service is now working fine with service splunk start/stop/restart commands

Re: Unable to boot start splunk during installation of splunk forwarder 6.2.2

aaraneta_splunk — Wed, 22 Mar 2017 01:36:10 GMT

@nirmalya2006 - Did your answer provide a working solution to your question? If yes and you would like to close out your post, don't forget to click "Accept" and upvote any previous answers/comments that were helpful. But if you'd like to keep it open for possibilities of other answers, then you don't have to take action on it yet.