Can't unlink pid file "/Applications/Splunk/var/run/splunk/splunkd.pid": Permission denied

[TheJagoff]

Splunk Free Enterprose download.

Trying to start Splunk - non-root user. To "Start and Show Plunk" I get the error: Can't unlink pid file "/Applications/Splunk/var/run/splunk/splunkd.pid": Permission denied.

Changed it to 755 via sudo chmod 755 splunkd.pid and I try to restart, get the same error

Running MACPRO Mavericks.

Any help is greatly apprciated

[grijhwani]

You'll get this as a consequence of running splunk as root, or as a bootable service.

[MuS · Accepted solution]

Hi TheJagoff,

you need to chown the /Application/Splunk directory to the non-root user after you stopped splunk. Try this in a terminal as the non-root user:

sudo chown -R non-root-user /Application/Splunk
/Application/Splunk/bin/splunk start

You also need to modify the /Application/Splunk/etc/splunk-launch.conf file to set the userid which runs splunk.
Hope this helps ...

cheers, MuS

[TheJagoff]

Worked perfectly! Many thanks!

[MuS]

you're welcome - please accept the answer in this case.