topic Re: Suddenly in my Splunk Enterprise KV Store Initialization Failed in Knowledge Management

Suddenly Splunk Enterprise KV Store Initialization Failed

vinod743374 — Tue, 13 Dec 2022 15:09:47 GMT

These are the errors i am getting,

Create ssl certificate is also tried, it works fine, its not an ssl issue.

can any one help us

Re: Suddenly in my Splunk Enterprise KV Store Initialization Failed

richgalloway — Mon, 12 Dec 2022 16:33:46 GMT

What did you find in mongod.log and splunkd.log?

Re: Suddenly in my Splunk Enterprise KV Store Initialization Failed

vinod743374 — Mon, 12 Dec 2022 16:36:59 GMT

2022-12-09T07:20:04.178Z I STORAGE [journal writer] In File::open(), CreateFileW for 'E:\Program Files\Splunk\var\lib\splunk\kvstore\mongo\journal\lsn' failed with Access is denied.
2022-12-09T07:20:04.178Z I JOURNAL [journal writer] warning: open of lsn file failed

this is the error i am getting

Re: Suddenly in my Splunk Enterprise KV Store Initialization Failed

richgalloway — Mon, 12 Dec 2022 16:57:16 GMT

Check the ownership and permissions for the E:\Program Files\Splunk\var\lib\splunk\kvstore\mongo\journal\lsn file.

Re: Suddenly in my Splunk Enterprise KV Store Initialization Failed

vinod743374 — Tue, 13 Dec 2022 03:45:50 GMT

Thanks For the Solution, I just changed the Permissions for the Mongodb Folder and restarted the Splunk.

It worked.