https://community.splunk.com/t5/Monitoring-Splunk/KVStore-Process-Terminated/m-p/504248#M4232 <P>Splunk installed on windows server, getting the following errors in web UI:&nbsp;</P><P>&nbsp;</P><P><SPAN>KV Store process terminated abnormally (exit code 14, status exited with code 14). See mongod.log and splunkd.log for details.</SPAN></P><P><SPAN>KV Store changed status to failed. KVStore process terminated.</SPAN></P><P><SPAN>Failed to start KV Store process. See mongod.log and splunkd.log for details.</SPAN></P><P>&nbsp;</P><P>Checking mongod.log has the following entry:&nbsp;</P><P>[initandlisten] Detected unclean shutdown - C:\Program Files\Splunk\var\lib\splunk\kvstore\mongo\mongod.lock is not empty.<BR />I JOURNAL [initandlisten] journal dir=C:\Program Files\Splunk\var\lib\splunk\kvstore\mongo\journal<BR />I JOURNAL [initandlisten] recover begin<BR />I JOURNAL [initandlisten] info no lsn file in journal/ directory<BR />I JOURNAL [initandlisten] recover lsn: 0<BR />I JOURNAL [initandlisten] recover C:\Program Files\Splunk\var\lib\splunk\kvstore\mongo\journal\j._0<BR />F CONTROL [initandlisten] CreateFileW for C:\Program Files\Splunk\var\lib\splunk\kvstore\mongo\journal\j._0 failed with Access is denied. (file size is 8192) in MemoryMappedFile::map<BR />F - [initandlisten] Fatal Assertion 16334 at src\mongo\db\storage\mmap_v1\mmap.cpp 129<BR />F - [initandlisten]<BR />***aborting after fassert() failure</P><P>&nbsp;</P><P>Any ideas?</P> Sat, 13 Jun 2020 00:09:59 GMT splunkuser145 2020-06-13T00:09:59Z https://community.splunk.com/t5/Monitoring-Splunk/KVStore-Process-Terminated/m-p/504248#M4232 <P>Splunk installed on windows server, getting the following errors in web UI:&nbsp;</P><P>&nbsp;</P><P><SPAN>KV Store process terminated abnormally (exit code 14, status exited with code 14). See mongod.log and splunkd.log for details.</SPAN></P><P><SPAN>KV Store changed status to failed. KVStore process terminated.</SPAN></P><P><SPAN>Failed to start KV Store process. See mongod.log and splunkd.log for details.</SPAN></P><P>&nbsp;</P><P>Checking mongod.log has the following entry:&nbsp;</P><P>[initandlisten] Detected unclean shutdown - C:\Program Files\Splunk\var\lib\splunk\kvstore\mongo\mongod.lock is not empty.<BR />I JOURNAL [initandlisten] journal dir=C:\Program Files\Splunk\var\lib\splunk\kvstore\mongo\journal<BR />I JOURNAL [initandlisten] recover begin<BR />I JOURNAL [initandlisten] info no lsn file in journal/ directory<BR />I JOURNAL [initandlisten] recover lsn: 0<BR />I JOURNAL [initandlisten] recover C:\Program Files\Splunk\var\lib\splunk\kvstore\mongo\journal\j._0<BR />F CONTROL [initandlisten] CreateFileW for C:\Program Files\Splunk\var\lib\splunk\kvstore\mongo\journal\j._0 failed with Access is denied. (file size is 8192) in MemoryMappedFile::map<BR />F - [initandlisten] Fatal Assertion 16334 at src\mongo\db\storage\mmap_v1\mmap.cpp 129<BR />F - [initandlisten]<BR />***aborting after fassert() failure</P><P>&nbsp;</P><P>Any ideas?</P> Sat, 13 Jun 2020 00:09:59 GMT https://community.splunk.com/t5/Monitoring-Splunk/KVStore-Process-Terminated/m-p/504248#M4232 splunkuser145 2020-06-13T00:09:59Z