Archive

ERROR BTreeCP - checkpoint failed: removal of dir /opt/splunkforwarder/var/lib/splunk/fishbucket/splunk_private_db/snapshot.old failed: Directory not empty

kishen2017
Path Finder

Why I am getting "ERROR BTreeCP - checkpoint failed: removal of dir /opt/splunkforwarder/var/lib/splunk/fishbucket/splunk_private_db/snapshot.old failed: Directory not empty" error message in splunkd.log and also indexing is not happening during this message period.

Tags (1)

murali18
Engager

Go to this folder and check:
/opt/splunkforwarder/var/lib/splunk/fishbucket/splunk_private_db.

May be due to some Permission Issues.

0 Karma

chrisyounger
SplunkTrust
SplunkTrust

This usually happens if you run splunk as the root user and then try and run it later as the splunk user. Try this process:

be root
/opt/splunkforwarder/bin/splunk stop
ps -ef | grep splunk 

check nothing is running, then

chown -R splunk:splunk /opt/splunkforwarder 
su – splunk
/opt/splunkforwarder/bin/splunk start

payal23
Path Finder

@kishen2017 I am also facing the same prob. Did you got the fix?

0 Karma
Take the 2021 Splunk Career Survey

Help us learn about how Splunk has
impacted your career by taking the 2021 Splunk Career Survey.

Earn $50 in Amazon cash!