https://community.splunk.com/t5/Splunk-Search/What-is-the-manifest-file-and-is-there-an-issue-if-it-is-missing/m-p/340053#M166072 <P>Hi vanderaj2,<BR /> manifest file is an integrity check of default Splunk file.<BR /> Splunk continues to run also without it, there only the message you mentioned in startup.<BR /> If you want to solve the problem, you can take this file from another installation of the same Splunk version you're using or upgrade Splunk.<BR /> Bye.<BR /> Giuseppe</P> Sat, 16 Sep 2017 06:38:06 GMT gcusello 2017-09-16T06:38:06Z https://community.splunk.com/t5/Splunk-Search/What-is-the-manifest-file-and-is-there-an-issue-if-it-is-missing/m-p/340050#M166069 <P>Sounds like I have a manifest file/hashing issue that appears whenever I restart splunkd on an endpoint, like the following:</P> <H1>./splunk stop</H1> <P>Stopping splunkd...<BR /> Shutting down. Please wait, as this may take a few minutes.</P> <P>Stopping splunk helpers...</P> <P>Done.</P> <H1>./splunk start</H1> <P>Splunk&gt; 4TW</P> <P>Checking prerequisites...<BR /> Checking mgmt port [8089]: open<BR /> Checking conf files for problems...<BR /> Done<BR /> Checking default conf files for edits...<BR /> Cannot find any source of hashes. Manifest file '(null)' not present?<BR /> Problems were found, please review your files and move customizations to local<BR /> All preliminary checks passed.</P> <P>Starting splunk server daemon (splunkd)...<BR /> Done</P> <P>Is this just an annoying error or are there real problems when the manifest is missing? Our UNIX operations team tells me that they install the UF via a package manager, and claim that there is no manifest present on the systems.</P> <P>Thanks!</P> Fri, 15 Sep 2017 17:35:26 GMT https://community.splunk.com/t5/Splunk-Search/What-is-the-manifest-file-and-is-there-an-issue-if-it-is-missing/m-p/340050#M166069 vanderaj2 2017-09-15T17:35:26Z https://community.splunk.com/t5/Splunk-Search/What-is-the-manifest-file-and-is-there-an-issue-if-it-is-missing/m-p/340051#M166070 <P>The manifest file is actually just used to validate that all of the splunk installation files are intact upon startup. It isn't necessarily harmful to have it missing. It is more of an integrity check of the installation itself. You can find out more about this here:</P> <P><A href="https://docs.splunk.com/Documentation/Splunk/6.6.3/Admin/ChecktheintegrityofyourSplunksoftwarefiles">https://docs.splunk.com/Documentation/Splunk/6.6.3/Admin/ChecktheintegrityofyourSplunksoftwarefiles</A></P> Fri, 15 Sep 2017 19:49:26 GMT https://community.splunk.com/t5/Splunk-Search/What-is-the-manifest-file-and-is-there-an-issue-if-it-is-missing/m-p/340051#M166070 amahoski 2017-09-15T19:49:26Z https://community.splunk.com/t5/Splunk-Search/What-is-the-manifest-file-and-is-there-an-issue-if-it-is-missing/m-p/340052#M166071 <P>Hey @vanderaj2, If @amahoski solved your problem please remember to "√Accept" an answer to award karma points <span class="lia-unicode-emoji" title=":slightly_smiling_face:">🙂</span></P> Fri, 15 Sep 2017 22:50:36 GMT https://community.splunk.com/t5/Splunk-Search/What-is-the-manifest-file-and-is-there-an-issue-if-it-is-missing/m-p/340052#M166071 lfedak_splunk 2017-09-15T22:50:36Z https://community.splunk.com/t5/Splunk-Search/What-is-the-manifest-file-and-is-there-an-issue-if-it-is-missing/m-p/340053#M166072 <P>Hi vanderaj2,<BR /> manifest file is an integrity check of default Splunk file.<BR /> Splunk continues to run also without it, there only the message you mentioned in startup.<BR /> If you want to solve the problem, you can take this file from another installation of the same Splunk version you're using or upgrade Splunk.<BR /> Bye.<BR /> Giuseppe</P> Sat, 16 Sep 2017 06:38:06 GMT https://community.splunk.com/t5/Splunk-Search/What-is-the-manifest-file-and-is-there-an-issue-if-it-is-missing/m-p/340053#M166072 gcusello 2017-09-16T06:38:06Z https://community.splunk.com/t5/Splunk-Search/What-is-the-manifest-file-and-is-there-an-issue-if-it-is-missing/m-p/340054#M166073 <P>Ah gotcha - thanks and will do! <span class="lia-unicode-emoji" title=":slightly_smiling_face:">🙂</span></P> Mon, 18 Sep 2017 20:12:59 GMT https://community.splunk.com/t5/Splunk-Search/What-is-the-manifest-file-and-is-there-an-issue-if-it-is-missing/m-p/340054#M166073 vanderaj2 2017-09-18T20:12:59Z