https://community.splunk.com/t5/Knowledge-Management/Mongodb-failing-to-start/m-p/474498#M8177 <P>FYI: Splunk 8.0 is not supported in Windows 2012 Ref. <A href="https://docs.splunk.com/Documentation/Splunk/latest/Installation/Systemrequirements#Windows_operating_systems">https://docs.splunk.com/Documentation/Splunk/latest/Installation/Systemrequirements#Windows_operating_systems</A></P> Mon, 04 Nov 2019 14:04:37 GMT harsmarvania57 2019-11-04T14:04:37Z https://community.splunk.com/t5/Knowledge-Management/Mongodb-failing-to-start/m-p/474497#M8176 <P>I am running Splunk 8.0 on a Windows 2012 R2 server. When I start Splunk I am getting the kvstore failed error. <BR /> In trying to fix it, I noticed that the server SSL certificate had expired and mongo was not starting. <BR /> I generated a new certificate using:</P> <PRE><CODE> splunk createssl server-cert -d "C:\Program Files\Splunk\etc\auth" -n server.pem -c BLAH -p </CODE></PRE> <P>Now, I see the following in the mongodb log:</P> <PRE><CODE>2019-11-01T19:48:22.804Z W CONTROL [main] net.ssl.sslCipherConfig is deprecated. It will be removed in a future release. 2019-11-01T19:48:22.908Z E NETWORK [main] cannot read PEM key file: C:/Program Files/Splunk/etc/auth/server.pem error:06065064:digital envelope routines:EVP_DecryptFinal_ex:bad decrypt 2019-11-01T19:48:22.908Z F CONTROL [main] Failed global initialization: InvalidSSLConfiguration: Can not set up PEM key file. </CODE></PRE> <P>My server config file is now:</P> <PRE><CODE>[general] serverName = mcso-splunk pass4SymmKey = $1$hsG8OnpoeonS [sslConfig] sslKeysfilePassword = $7$SsDrXmvwh9d+HupPfZFTztNG2YvcX1+WcBVVQxO9dVhD5ToFr26cKYE00yDMJp7P sslPassword = $7$VDRTGDCLYgi3pWcL3HOLBXZ7TcSFU6z4XONKdCdf/kE29WOaiNOqzIncFPG4S/Ht [lmpool:auto_generated_pool_download-trial] description = auto_generated_pool_download-trial quota = MAX slaves = * stack_id = download-trial [lmpool:auto_generated_pool_forwarder] description = auto_generated_pool_forwarder quota = MAX slaves = * stack_id = forwarder [lmpool:auto_generated_pool_free] description = auto_generated_pool_free quota = MAX slaves = * stack_id = free [lmpool:auto_generated_pool_enterprise] description = auto_generated_pool_enterprise quota = MAX slaves = * stack_id = enterprise [license] active_group = Enterprise </CODE></PRE> <P>Any thoughts would be appreciated, thanks.</P> Fri, 01 Nov 2019 19:56:37 GMT https://community.splunk.com/t5/Knowledge-Management/Mongodb-failing-to-start/m-p/474497#M8176 mgrattan 2019-11-01T19:56:37Z https://community.splunk.com/t5/Knowledge-Management/Mongodb-failing-to-start/m-p/474498#M8177 <P>FYI: Splunk 8.0 is not supported in Windows 2012 Ref. <A href="https://docs.splunk.com/Documentation/Splunk/latest/Installation/Systemrequirements#Windows_operating_systems">https://docs.splunk.com/Documentation/Splunk/latest/Installation/Systemrequirements#Windows_operating_systems</A></P> Mon, 04 Nov 2019 14:04:37 GMT https://community.splunk.com/t5/Knowledge-Management/Mongodb-failing-to-start/m-p/474498#M8177 harsmarvania57 2019-11-04T14:04:37Z https://community.splunk.com/t5/Knowledge-Management/Mongodb-failing-to-start/m-p/474499#M8178 <P>Can you take a backup of server.conf and remove sslKeysfilePassword stanza as this is deprecated and also sslPassword stanza. Restart SPLUNK, it should add the default sslPassword values again.</P> <P>The error you see is related to bad password on SSL Certificates .</P> Mon, 06 Jan 2020 21:35:34 GMT https://community.splunk.com/t5/Knowledge-Management/Mongodb-failing-to-start/m-p/474499#M8178 badrinath_itrs 2020-01-06T21:35:34Z