I started splunk as another user and I can't remember the start command to set it back to the correct user and\or the file that might need to be purged.
command is something like: ./splunk start -user splunk ????
have you read this doc? use that to change the ownership back to splunk and then you should only really need to do splunk start. it seems like there was a permissions change at some point.
View solution in original post