I can't find var/lib/splunk/defaultdb in Linux server.

[wuming79]

Hi,

I can't seem to find var/lib/splunk/defaultdb in my linux. I was following these instructions here.

http://docs.splunk.com/Documentation/Splunk/6.2.1/Capacity/Estimateyourstoragerequirements

Did a find defaultdb returned "no such found".
Pls help.

Regards,
Lewis

[s2_splunk · Accepted solution]

Did you install Splunk?
Did you start Splunk?
Default installation directory for Splunk is /opt/splunk, so you will be able to find /opt/splunk/var/lib/splunk/defaultdb unless your Splunk installation or startup failed.

[wuming79]

Hi, I found it at /opt/splunk/var/lib/splunk/defaultdb. Thanks.
I should have use locate instead of find in Linux.