https://community.splunk.com/t5/Monitoring-Splunk/Windows-could-not-start-the-Splunkd-or-SplunkForwarder-service/m-p/148264#M1719 <P>What do you do when DoD IA policies flag this as a possible security violation and require the quotes?</P> Thu, 18 Sep 2014 17:28:19 GMT kmattern 2014-09-18T17:28:19Z https://community.splunk.com/t5/Monitoring-Splunk/Windows-could-not-start-the-Splunkd-or-SplunkForwarder-service/m-p/148262#M1717 <P>This may have already been posted but I couldn't find it and I burnt up about 2-3 hours scratching my head...</P> <P>After a service restart, if you get the following error message: <BR /> "Windows could not start the Splunkd service on Local Computer. Error 2: The system cannot find the file specified."</P> <P>Answer can be found below. I hope it helps someone save some time.</P> Fri, 18 Jul 2014 02:49:17 GMT https://community.splunk.com/t5/Monitoring-Splunk/Windows-could-not-start-the-Splunkd-or-SplunkForwarder-service/m-p/148262#M1717 Strype 2014-07-18T02:49:17Z https://community.splunk.com/t5/Monitoring-Splunk/Windows-could-not-start-the-Splunkd-or-SplunkForwarder-service/m-p/148263#M1718 <P>Windows key + r Type regedit HKLM &gt; System &gt; CurrentControlSet &gt; services &gt; Splunkd (or SplunkForwarder) If ImagePath has quotes in it, delete them and start the service.</P> Fri, 18 Jul 2014 02:50:37 GMT https://community.splunk.com/t5/Monitoring-Splunk/Windows-could-not-start-the-Splunkd-or-SplunkForwarder-service/m-p/148263#M1718 Strype 2014-07-18T02:50:37Z https://community.splunk.com/t5/Monitoring-Splunk/Windows-could-not-start-the-Splunkd-or-SplunkForwarder-service/m-p/148264#M1719 <P>What do you do when DoD IA policies flag this as a possible security violation and require the quotes?</P> Thu, 18 Sep 2014 17:28:19 GMT https://community.splunk.com/t5/Monitoring-Splunk/Windows-could-not-start-the-Splunkd-or-SplunkForwarder-service/m-p/148264#M1719 kmattern 2014-09-18T17:28:19Z https://community.splunk.com/t5/Monitoring-Splunk/Windows-could-not-start-the-Splunkd-or-SplunkForwarder-service/m-p/148265#M1720 <P>The answer did not work when I tried it</P> Thu, 19 Mar 2015 21:17:57 GMT https://community.splunk.com/t5/Monitoring-Splunk/Windows-could-not-start-the-Splunkd-or-SplunkForwarder-service/m-p/148265#M1720 pparkerntx99 2015-03-19T21:17:57Z https://community.splunk.com/t5/Monitoring-Splunk/Windows-could-not-start-the-Splunkd-or-SplunkForwarder-service/m-p/148266#M1721 <P>This didn't work for me either and I also receive:</P> <P><STRONG>Error 1067: The process terminated unexpectedly.</STRONG></P> Thu, 02 Apr 2015 14:12:40 GMT https://community.splunk.com/t5/Monitoring-Splunk/Windows-could-not-start-the-Splunkd-or-SplunkForwarder-service/m-p/148266#M1721 david_pinon 2015-04-02T14:12:40Z