Deployment Architecture

Error on enabling boot-start

uptimebox
Engager

Debian GNU/Linux 6.0 (Squeeze)

# splunk --version
Splunk Universal Forwarder 4.2 (build 96430)
# splunk enable boot-start
update-rc.d: using dependency based boot sequencing
insserv: warning: script 'splunk' missing LSB tags and overrides
insserv: There is a loop between service munin-node and splunk if stopped
insserv:  loop involving service splunk at depth 2
insserv:  loop involving service munin-node at depth 1
insserv: Stopping splunk depends on munin-node and therefore on system facility `$all' which can not be true!
insserv: exiting now without changing boot order!
update-rc.d: error: insserv rejected the script header
Tags (1)

csamuel
Engager

I've solved this by adapting the section from mysql for splunk, thus (as a diff) - this has let us migrate to a dependency based boot with insserv:

diff --git a/init.d/splunk b/init.d/splunk
index 1941f17..af67001 100755
--- a/init.d/splunk
+++ b/init.d/splunk
@@ -4,6 +4,18 @@
 # init script for Splunk.
 # generated by 'splunk enable boot-start'.
 #
+### BEGIN INIT INFO
+# Provides:          splunk
+# Required-Start:    $remote_fs $syslog
+# Required-Stop:     $remote_fs $syslog
+# Should-Start:      $network $time
+# Should-Stop:       $network $time
+# Default-Start:     2 3 4 5
+# Default-Stop:      0 1 6
+# Short-Description: Start and stop the splunk database server daemon
+# Description:       Controls the main splunk database server daemon "splunk"
+### END INIT INFO
+
 RETVAL=0
 
 splunk_start() {
Get Updates on the Splunk Community!

Accelerating Observability as Code with the Splunk AI Assistant

We’ve seen in previous posts what Observability as Code (OaC) is and how it’s now essential for managing ...

Integrating Splunk Search API and Quarto to Create Reproducible Investigation ...

 Splunk is More Than Just the Web Console For Digital Forensics and Incident Response (DFIR) practitioners, ...

Congratulations to the 2025-2026 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...