Splunk Search

Splunk: Failed to open splunk.secret Access Denied

Jvlemmings
New Member

I am running Splunk on Windows 10.
I start splunk using:

C:\Program Files\Splunk\bin\splunk.exe start

first I need to adjust my port as 8000 is already in use. So when connecting I see the 404 error.

After that i try to run again:

C:\Program Files\Splunk\bin\splunk.exe start

I get the following error:
Failed to open splunk.secret
Some passwords will not work. errno = Access is denied
Unable to read splunk.secret.file
Operation "os h_fopen"failed in C:\wrangler-2.0\build-src\kimono\src\libzero
conf-mutator-locking.c:313, conf_mutator_lock<>: No Error

Tags (1)
0 Karma

Richfez
SplunkTrust
SplunkTrust

Check your services for splunk to be running. If it is, stop it.

As a backup way to get that accomplished you can check task manager and kill any splunk executables you find. That's sort of mean, so the "service method" above is the preferred way. 🙂

A reboot would also take care of that most likely. Since you've reconfigured Splunk to use a different port, when you restart everything will come up fresh on the new port.

0 Karma

Richfez
SplunkTrust
SplunkTrust

All assuming, of course, that you don't just need the answer woodcock provided. 🙂

0 Karma

woodcock
Esteemed Legend

You need to start splunk as an admin user. Your user does not have access to the files that splunk needs to run.

0 Karma

kannappac
New Member

can you pls advise, how to start splunk as an admin user.

0 Karma
Get Updates on the Splunk Community!

What's new in Splunk Cloud Platform 9.1.2312?

Hi Splunky people! We are excited to share the newest updates in Splunk Cloud Platform 9.1.2312! Analysts can ...

What’s New in Splunk Security Essentials 3.8.0?

Splunk Security Essentials (SSE) is an app that can amplify the power of your existing Splunk Cloud Platform, ...

Let’s Get You Certified – Vegas-Style at .conf24

Are you ready to level up your Splunk game? Then, let’s get you certified live at .conf24 – our annual user ...