topic Re: Splunk: Failed to open splunk.secret Access Denied in Splunk Search

Splunk: Failed to open splunk.secret Access Denied

Jvlemmings — Tue, 29 Sep 2020 15:06:05 GMT

I am running Splunk on Windows 10.
I start splunk using:

C:\Program Files\Splunk\bin\splunk.exe start

first I need to adjust my port as 8000 is already in use. So when connecting I see the 404 error.

After that i try to run again:

C:\Program Files\Splunk\bin\splunk.exe start

I get the following error:
Failed to open splunk.secret
Some passwords will not work. errno = Access is denied
Unable to read splunk.secret.file
Operation "os h_fopen"failed in C:\wrangler-2.0\build-src\kimono\src\libzero
conf-mutator-locking.c:313, conf_mutator_lock<>: No Error

Re: Splunk: Failed to open splunk.secret Access Denied

woodcock — Fri, 28 Jul 2017 13:25:13 GMT

You need to start splunk as an admin user. Your user does not have access to the files that splunk needs to run.

Re: Splunk: Failed to open splunk.secret Access Denied

Richfez — Fri, 28 Jul 2017 13:31:56 GMT

Check your services for splunk to be running. If it is, stop it.

As a backup way to get that accomplished you can check task manager and kill any splunk executables you find. That's sort of mean, so the "service method" above is the preferred way. 🙂

A reboot would also take care of that most likely. Since you've reconfigured Splunk to use a different port, when you restart everything will come up fresh on the new port.

Re: Splunk: Failed to open splunk.secret Access Denied

Richfez — Fri, 28 Jul 2017 13:33:16 GMT

All assuming, of course, that you don't just need the answer woodcock provided. 🙂

Re: Splunk: Failed to open splunk.secret Access Denied

kannappac — Fri, 02 Nov 2018 09:33:21 GMT

can you pls advise, how to start splunk as an admin user.