https://community.splunk.com/t5/Random/How-do-I-solve-these-BOTSv3-Setup-issues/m-p/508934#M9 <P>Hi, I'm pretty new to splunk and hoped to gain some more experience by attempting to complete the Boss of the SOC v3 challenge. I have splunk installed on Ubuntu per the instructions on the <A href="https://github.com/splunk/botsv3/blob/master/README.md" target="_self">github</A> page. I have also downloaded and extracted the dataset but when I try to start splunk again, i get the following error message:</P> <P>&nbsp;</P> <PRE>homePath='/opt/splunk/etc/apps/botsv3_data_set/var/lib/splunk/botsv3/db' of index=_botsv3 on unusable filesystem. Validating databases (splunkd validatedb) failed with code '1'. If you cannot resolve the issue(s) above after consulting documentation, please file a case online at <A href="http://www.splunk.com/page/submit_issue" target="test_blank" rel="nofollow noopener noreferrer">http://www.splunk.com/page/submit_issue</A>&nbsp;&nbsp;</PRE> <P>I've already changed the splunk-launch.conf file by adding the OPTIMISTIC_ABOUT_FILE_LOCKING = 1 but I still get the same message. Any tips on resolving this issue?</P> Tue, 03 Jan 2023 02:04:37 GMT sarahtse 2023-01-03T02:04:37Z https://community.splunk.com/t5/Random/How-do-I-solve-these-BOTSv3-Setup-issues/m-p/508934#M9 <P>Hi, I'm pretty new to splunk and hoped to gain some more experience by attempting to complete the Boss of the SOC v3 challenge. I have splunk installed on Ubuntu per the instructions on the <A href="https://github.com/splunk/botsv3/blob/master/README.md" target="_self">github</A> page. I have also downloaded and extracted the dataset but when I try to start splunk again, i get the following error message:</P> <P>&nbsp;</P> <PRE>homePath='/opt/splunk/etc/apps/botsv3_data_set/var/lib/splunk/botsv3/db' of index=_botsv3 on unusable filesystem. Validating databases (splunkd validatedb) failed with code '1'. If you cannot resolve the issue(s) above after consulting documentation, please file a case online at <A href="http://www.splunk.com/page/submit_issue" target="test_blank" rel="nofollow noopener noreferrer">http://www.splunk.com/page/submit_issue</A>&nbsp;&nbsp;</PRE> <P>I've already changed the splunk-launch.conf file by adding the OPTIMISTIC_ABOUT_FILE_LOCKING = 1 but I still get the same message. Any tips on resolving this issue?</P> Tue, 03 Jan 2023 02:04:37 GMT https://community.splunk.com/t5/Random/How-do-I-solve-these-BOTSv3-Setup-issues/m-p/508934#M9 sarahtse 2023-01-03T02:04:37Z https://community.splunk.com/t5/Random/How-do-I-solve-these-BOTSv3-Setup-issues/m-p/518790#M27 <P>Check permission and owner</P> Thu, 10 Sep 2020 03:56:05 GMT https://community.splunk.com/t5/Random/How-do-I-solve-these-BOTSv3-Setup-issues/m-p/518790#M27 Hyeok 2020-09-10T03:56:05Z https://community.splunk.com/t5/Random/How-do-I-solve-these-BOTSv3-Setup-issues/m-p/625587#M1634 <P>am having the same problems. can anyone here help pls. Am not able to do anything for days as i want to practice with the dataset. Attached is the screenshot. Thanks in advance. This is my number i really need urgent assistance. Been searching everywhere on youtube bot no way.</P> Sun, 01 Jan 2023 22:58:07 GMT https://community.splunk.com/t5/Random/How-do-I-solve-these-BOTSv3-Setup-issues/m-p/625587#M1634 Lorenzo1 2023-01-01T22:58:07Z