Getting Data In

Original splunk container fails to start (RHEL 7.6 + Docker 1.13.1-103) -- but works fine on CentOS 7

New Member

Loading a new and unmodified splunk container throws an error and cannot start on RHEL 7.6
The docker image has been pulled from docker.io using "docker pull splunk/splunk:latest"

This occurs on RHEL 7.6 with Docker 1.13.103 while on CentOS 7 with same Docker Version behaves differently.
The startup command ("docker run ..") is exactly the same:
a) On CentOS 7 the docker container starts silently, is up and running after about a minute.
It starts up successfully (log attached below - Section "B").
b) On RHEL 7.6 it fails after roughly 30 seconds (log see below - section "A").

A) Docker run on RHEL 7 (not successful):
$ docker run -d -p 12706:8000 -e 'SPLUNK_START_ARGS=--accept-license' -e 'SPLUNK_PASSWORD=Secret123' --name splunk splunk
a321fcc0a98b93057f16b5215a438251080e576ef8330e7acdcc75baadbd9535

$ docker logs splunk
PLAY [Run default Splunk provisioning]
Wednesday 16 October 2019 09:53:47 +0000 (0:00:00.042) 0:00:00.042
TASK [Gathering Facts]
ok: [localhost]
Wednesday 16 October 2019 09:53:50 +0000 (0:00:03.024) 0:00:03.066
Wednesday 16 October 2019 09:53:50 +0000 (0:00:00.044) 0:00:03.111
Wednesday 16 October 2019 09:53:50 +0000 (0:00:00.037) 0:00:03.148
Wednesday 16 October 2019 09:53:50 +0000 (0:00:00.150) 0:00:03.299
included: /opt/ansible/roles/splunk_common/tasks/get_facts.yml for localhost
Wednesday 16 October 2019 09:53:51 +0000 (0:00:00.081) 0:00:03.380
TASK [splunk_common : Set privilege escalation user]
ok: [localhost]
Wednesday 16 October 2019 09:53:51 +0000 (0:00:00.039) 0:00:03.420
TASK [splunk_common : Check for existing installation]
ok: [localhost]
Wednesday 16 October 2019 09:53:52 +0000 (0:00:01.081) 0:00:04.502
TASK [splunk_common : Set splunk install fact]
ok: [localhost]
Wednesday 16 October 2019 09:53:52 +0000 (0:00:00.043) 0:00:04.545
TASK [splunk_common : Check for existing splunk secret]
ok: [localhost]
Wednesday 16 October 2019 09:53:52 +0000 (0:00:00.148) 0:00:04.694
TASK [splunk_common : Set first run fact]
ok: [localhost]
Wednesday 16 October 2019 09:53:52 +0000 (0:00:00.043) 0:00:04.737
TASK [splunk_common : Check if we are in a docker]
ok: [localhost]
Wednesday 16 October 2019 09:53:53 +0000 (0:00:00.930) 0:00:05.668
TASK [splunk_common : Set docker fact]
ok: [localhost]
Wednesday 16 October 2019 09:53:53 +0000 (0:00:00.040) 0:00:05.708
included: /opt/ansible/roles/splunk_common/tasks/get_facts_build_type.yml for localhost
Wednesday 16 October 2019 09:53:53 +0000 (0:00:00.072) 0:00:05.781
Wednesday 16 October 2019 09:53:53 +0000 (0:00:00.037) 0:00:05.818
Wednesday 16 October 2019 09:53:53 +0000 (0:00:00.042) 0:00:05.861
Wednesday 16 October 2019 09:53:53 +0000 (0:00:00.045) 0:00:05.907
Wednesday 16 October 2019 09:53:53 +0000 (0:00:00.048) 0:00:05.955
Wednesday 16 October 2019 09:53:53 +0000 (0:00:00.043) 0:00:05.998
included: /opt/ansible/roles/splunk_common/tasks/get_facts_target_version.yml for localhost
Wednesday 16 October 2019 09:53:53 +0000 (0:00:00.076) 0:00:06.075
Wednesday 16 October 2019 09:53:53 +0000 (0:00:00.039) 0:00:06.115
Wednesday 16 October 2019 09:53:53 +0000 (0:00:00.038) 0:00:06.153
Wednesday 16 October 2019 09:53:53 +0000 (0:00:00.038) 0:00:06.191
TASK [splunk_common : Find manifests]
ok: [localhost]
Wednesday 16 October 2019 09:53:54 +0000 (0:00:00.341) 0:00:06.533
TASK [splunk_common : Set current version fact]
ok: [localhost]
Wednesday 16 October 2019 09:53:54 +0000 (0:00:00.044) 0:00:06.577
TASK [splunk_common : Setting upgrade fact]
ok: [localhost]
Wednesday 16 October 2019 09:53:54 +0000 (0:00:00.042) 0:00:06.620
included: /opt/ansible/roles/splunk_common/tasks/change_splunk_directory_owner.yml for localhost
Wednesday 16 October 2019 09:53:54 +0000 (0:00:00.082) 0:00:06.702
TASK [splunk_common : Update Splunk directory owner]
changed: [localhost]
Wednesday 16 October 2019 09:54:08 +0000 (0:00:13.950) 0:00:20.653
included: /opt/ansible/roles/splunk_common/tasks/update_etc.yml for localhost
Wednesday 16 October 2019 09:54:08 +0000 (0:00:00.089) 0:00:20.743
TASK [splunk_common : Check if /sbin/updateetc.sh exists]
ok: [localhost]
Wednesday 16 October 2019 09:54:09 +0000 (0:00:00.923) 0:00:21.666
TASK [splunk_common : Update /opt/splunk/etc]
changed: [localhost]
Wednesday 16 October 2019 09:54:10 +0000 (0:00:01.421) 0:00:23.088
Wednesday 16 October 2019 09:54:10 +0000 (0:00:00.036) 0:00:23.125
Wednesday 16 October 2019 09:54:10 +0000 (0:00:00.038) 0:00:23.163
Wednesday 16 October 2019 09:54:10 +0000 (0:00:00.039) 0:00:23.203
included: /opt/ansible/roles/splunk_common/tasks/remove_first_login.yml for localhost
Wednesday 16 October 2019 09:54:10 +0000 (0:00:00.080) 0:00:23.283
TASK [splunk_common : Create .ui_login]
changed: [localhost]
Wednesday 16 October 2019 09:54:11 +0000 (0:00:00.151) 0:00:23.434
Wednesday 16 October 2019 09:54:11 +0000 (0:00:00.039) 0:00:23.473
included: /opt/ansible/roles/splunk_common/tasks/set_splunk_secret.yml for localhost
Wednesday 16 October 2019 09:54:11 +0000 (0:00:00.105) 0:00:23.579
Wednesday 16 October 2019 09:54:11 +0000 (0:00:00.042) 0:00:23.621
included: /opt/ansible/roles/splunk_common/tasks/set_user_seed.yml for localhost
Wednesday 16 October 2019 09:54:11 +0000 (0:00:00.091) 0:00:23.712
TASK [splunk_common : Hash the password]
changed: [localhost]
Wednesday 16 October 2019 09:54:12 +0000 (0:00:00.989) 0:00:24.702
TASK [splunk_common : Generate user-seed.conf (Linux)]
changed: [localhost] => (item=USERNAME)
changed: [localhost] => (item=HASHED_PASSWORD)
Wednesday 16 October 2019 09:54:12 +0000 (0:00:00.443) 0:00:25.146
Wednesday 16 October 2019 09:54:12 +0000 (0:00:00.057) 0:00:25.203
included: /opt/ansible/roles/splunk_common/tasks/pre_splunk_start_commands.yml for localhost
Wednesday 16 October 2019 09:54:12 +0000 (0:00:00.091) 0:00:25.295
Wednesday 16 October 2019 09:54:12 +0000 (0:00:00.042) 0:00:25.337
included: /opt/ansible/roles/splunk_common/tasks/enable_s2s_port.yml for localhost
Wednesday 16 October 2019 09:54:13 +0000 (0:00:00.098) 0:00:25.435
TASK [splunk_common : Enable the Splunk-to-Splunk port]
fatal: [localhost]: FAILED! => {
"changed": false,
"cmd": [
"/opt/splunk/bin/splunk",
"enable",
"listen",
"9997",
"-auth",
"admin:blabla123",
"--accept-license",
"--answer-yes",
"--no-prompt"
],
"delta": "0:00:02.042621",
"end": "2019-10-16 09:54:15.238129",
"failed_when_result": true,
"rc": 2,
"start": "2019-10-16 09:54:13.195508"
}

STDOUT:

This appears to be your first time running this version of Splunk.

STDERR:

Copying '/opt/splunk/etc/openldap/ldap.conf.default' to '/opt/splunk/etc/openldap/ldap.conf'.
Generating RSA private key, 2048 bit long modulus
..........+++++
.............................................................+++++
e is 65537 (0x10001)
writing RSA key

Generating RSA private key, 2048 bit long modulus
.....................+++++
......................+++++
e is 65537 (0x10001)
writing RSA key

Moving '/opt/splunk/share/splunk/search_mrsparkle/modules.new' to '/opt/splunk/share/splunk/search_mrsparkle/modules'.

An unforeseen error occurred:

    Exception: <type 'exceptions.OSError'>, Value: [Errno 39] Directory not empty: '/opt/splunk/share/splunk/search_mrsparkle/modules.new/converters'

Traceback (most recent call last):
File "/opt/splunk/lib/python2.7/site-packages/splunk/clilib/cli.py", line 1149, in main
parseAndRun(argsList)
File "/opt/splunk/lib/python2.7/site-packages/splunk/clilib/cli.py", line 1004, in parseAndRun
retVal = cList.getCmd(command, subCmd).call(argList, fromCLI = True)
File "/opt/splunk/lib/python2.7/site-packages/splunk/clilib/cli.py", line 280, in call
return self.func(args, fromCLI)
File "/opt/splunk/lib/python2.7/site-packages/splunk/clilib/control_api.py", line 30, in wrapperFunc
return func(dictCopy, fromCLI)
File "/opt/splunk/lib/python2.7/site-packages/splunk/clilib/_internal.py", line 177, in firstTimeRun
comm.moveItem(migration.PATH_UI_MOD_NEW, migration.PATH_UI_MOD_ACTIVE)
File "/opt/splunk/lib/python2.7/site-packages/splunk/clilib/cli_common.py", line 1017, in moveItem
shutil.move(src, dst)
File "/opt/splunk/lib/python2.7/shutil.py", line 314, in move
rmtree(src)
File "/opt/splunk/lib/python2.7/shutil.py", line 261, in rmtree
rmtree(fullname, ignore_errors, onerror)
File "/opt/splunk/lib/python2.7/shutil.py", line 270, in rmtree
onerror(os.rmdir, path, sys.exc_info())
File "/opt/splunk/lib/python2.7/shutil.py", line 268, in rmtree
os.rmdir(path)
OSError: [Errno 39] Directory not empty: '/opt/splunk/share/splunk/search_mrsparkle/modules.new/converters'

Please file a case online at http://www.splunk.com/page/submit_issue

MSG:

non-zero return code

PLAY RECAP
localhost : ok=27 changed=5 unreachable=0 failed=1 skipped=17 rescued=0 ignored=0

Wednesday 16 October 2019 09:54:15 +0000 (0:00:02.191) 0:00:27.626

splunk_common : Update Splunk directory owner -------------------------- 13.95s
Gathering Facts --------------------------------------------------------- 3.02s
splunk_common : Enable the Splunk-to-Splunk port ------------------------ 2.19s
splunk_common : Update /opt/splunk/etc ---------------------------------- 1.42s
splunk_common : Check for existing installation ------------------------- 1.08s
splunk_common : Hash the password --------------------------------------- 0.99s
splunk_common : Check if we are in a docker ----------------------------- 0.93s
splunk_common : Check if /sbin/updateetc.sh exists ---------------------- 0.92s
splunk_common : Generate user-seed.conf (Linux) ------------------------- 0.44s
splunk_common : Find manifests ------------------------------------------ 0.34s
splunk_common : Create .ui_login ---------------------------------------- 0.15s
Provision role ---------------------------------------------------------- 0.15s
splunk_common : Check for existing splunk secret ------------------------ 0.15s
splunk_common : include_tasks ------------------------------------------- 0.11s
splunk_common : include_tasks ------------------------------------------- 0.10s
splunk_common : include_tasks ------------------------------------------- 0.09s
splunk_common : include_tasks ------------------------------------------- 0.09s
splunk_common : include_tasks ------------------------------------------- 0.09s
splunk_common : include_tasks ------------------------------------------- 0.08s
splunk_common : include_tasks ------------------------------------------- 0.08s
splunkd is not running.

B) Docker run on CentOS 7 (successful):
$ docker run -d -p 12706:8000 -e 'SPLUNK_START_ARGS=--accept-license' -e 'SPLUNK_PASSWORD=Secret123' --name splunk splunk
d4b05f1e16083e3f5c34e2b97e619125e305fb7f987feb65a8924b6663c4846e

$ docker ps
CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES
d4b05f1e1608 splunk "/sbin/entrypoint...." About a minute ago Up About a minute (healthy) 8065/tcp, 8088-8089/tcp, 8191/tcp, 9887/tcp, 9997/tcp, 0.0.0.0:12706->8000/tcp splunk

$ docker logs splunk
PLAY [Run default Splunk provisioning]
Wednesday 16 October 2019 09:36:43 +0000 (0:00:00.066) 0:00:00.066
TASK [Gathering Facts]
ok: [localhost]
Wednesday 16 October 2019 09:36:48 +0000 (0:00:04.238) 0:00:04.305
Wednesday 16 October 2019 09:36:48 +0000 (0:00:00.048) 0:00:04.353
Wednesday 16 October 2019 09:36:48 +0000 (0:00:00.036) 0:00:04.389
Wednesday 16 October 2019 09:36:48 +0000 (0:00:00.149) 0:00:04.538
included: /opt/ansible/roles/splunk_common/tasks/get_facts.yml for localhost
Wednesday 16 October 2019 09:36:48 +0000 (0:00:00.079) 0:00:04.618
TASK [splunk_common : Set privilege escalation user]
ok: [localhost]
Wednesday 16 October 2019 09:36:48 +0000 (0:00:00.038) 0:00:04.657
TASK [splunk_common : Check for existing installation]
ok: [localhost]
Wednesday 16 October 2019 09:36:49 +0000 (0:00:01.063) 0:00:05.720
TASK [splunk_common : Set splunk install fact]
ok: [localhost]
Wednesday 16 October 2019 09:36:49 +0000 (0:00:00.040) 0:00:05.760
TASK [splunk_common : Check for existing splunk secret]
ok: [localhost]
Wednesday 16 October 2019 09:36:49 +0000 (0:00:00.142) 0:00:05.903
TASK [splunk_common : Set first run fact]
ok: [localhost]
Wednesday 16 October 2019 09:36:49 +0000 (0:00:00.039) 0:00:05.942
TASK [splunk_common : Check if we are in a docker]
ok: [localhost]
Wednesday 16 October 2019 09:36:50 +0000 (0:00:00.869) 0:00:06.811
TASK [splunk_common : Set docker fact]
ok: [localhost]
Wednesday 16 October 2019 09:36:50 +0000 (0:00:00.040) 0:00:06.851
included: /opt/ansible/roles/splunk_common/tasks/get_facts_build_type.yml for localhost
Wednesday 16 October 2019 09:36:50 +0000 (0:00:00.066) 0:00:06.918
Wednesday 16 October 2019 09:36:50 +0000 (0:00:00.035) 0:00:06.954
Wednesday 16 October 2019 09:36:50 +0000 (0:00:00.040) 0:00:06.994
Wednesday 16 October 2019 09:36:50 +0000 (0:00:00.041) 0:00:07.036
Wednesday 16 October 2019 09:36:50 +0000 (0:00:00.041) 0:00:07.077
Wednesday 16 October 2019 09:36:50 +0000 (0:00:00.043) 0:00:07.121
included: /opt/ansible/roles/splunk_common/tasks/get_facts_target_version.yml for localhost
Wednesday 16 October 2019 09:36:50 +0000 (0:00:00.080) 0:00:07.202
Wednesday 16 October 2019 09:36:51 +0000 (0:00:00.037) 0:00:07.239
Wednesday 16 October 2019 09:36:51 +0000 (0:00:00.036) 0:00:07.276
Wednesday 16 October 2019 09:36:51 +0000 (0:00:00.037) 0:00:07.313
TASK [splunk_common : Find manifests]
ok: [localhost]
Wednesday 16 October 2019 09:36:51 +0000 (0:00:00.331) 0:00:07.645
TASK [splunk_common : Set current version fact]
ok: [localhost]
Wednesday 16 October 2019 09:36:51 +0000 (0:00:00.046) 0:00:07.691
TASK [splunk_common : Setting upgrade fact]
ok: [localhost]
Wednesday 16 October 2019 09:36:51 +0000 (0:00:00.045) 0:00:07.737
included: /opt/ansible/roles/splunk_common/tasks/change_splunk_directory_owner.yml for localhost
Wednesday 16 October 2019 09:36:51 +0000 (0:00:00.082) 0:00:07.819
TASK [splunk_common : Update Splunk directory owner]
ok: [localhost]
Wednesday 16 October 2019 09:36:53 +0000 (0:00:02.118) 0:00:09.937
included: /opt/ansible/roles/splunk_common/tasks/update_etc.yml for localhost
Wednesday 16 October 2019 09:36:53 +0000 (0:00:00.086) 0:00:10.024
TASK [splunk_common : Check if /sbin/updateetc.sh exists]
ok: [localhost]
Wednesday 16 October 2019 09:36:54 +0000 (0:00:00.837) 0:00:10.862
TASK [splunk_common : Update /opt/splunk/etc]
changed: [localhost]
Wednesday 16 October 2019 09:36:58 +0000 (0:00:03.376) 0:00:14.238
Wednesday 16 October 2019 09:36:58 +0000 (0:00:00.051) 0:00:14.290
Wednesday 16 October 2019 09:36:58 +0000 (0:00:00.039) 0:00:14.329
Wednesday 16 October 2019 09:36:58 +0000 (0:00:00.040) 0:00:14.370
included: /opt/ansible/roles/splunk_common/tasks/remove_first_login.yml for localhost
Wednesday 16 October 2019 09:36:58 +0000 (0:00:00.078) 0:00:14.449
TASK [splunk_common : Create .ui_login]
changed: [localhost]
Wednesday 16 October 2019 09:36:58 +0000 (0:00:00.213) 0:00:14.663
Wednesday 16 October 2019 09:36:58 +0000 (0:00:00.035) 0:00:14.699
included: /opt/ansible/roles/splunk_common/tasks/set_splunk_secret.yml for localhost
Wednesday 16 October 2019 09:36:58 +0000 (0:00:00.080) 0:00:14.779
Wednesday 16 October 2019 09:36:58 +0000 (0:00:00.038) 0:00:14.818
included: /opt/ansible/roles/splunk_common/tasks/set_user_seed.yml for localhost
Wednesday 16 October 2019 09:36:58 +0000 (0:00:00.143) 0:00:14.962
TASK [splunk_common : Hash the password]
changed: [localhost]
Wednesday 16 October 2019 09:37:00 +0000 (0:00:01.423) 0:00:16.385
TASK [splunk_common : Generate user-seed.conf (Linux)]
changed: [localhost] => (item=USERNAME)
changed: [localhost] => (item=HASHED_PASSWORD)
Wednesday 16 October 2019 09:37:00 +0000 (0:00:00.496) 0:00:16.882
Wednesday 16 October 2019 09:37:00 +0000 (0:00:00.056) 0:00:16.939
included: /opt/ansible/roles/splunk_common/tasks/pre_splunk_start_commands.yml for localhost
Wednesday 16 October 2019 09:37:00 +0000 (0:00:00.084) 0:00:17.023
Wednesday 16 October 2019 09:37:00 +0000 (0:00:00.039) 0:00:17.063
included: /opt/ansible/roles/splunk_common/tasks/enable_s2s_port.yml for localhost
Wednesday 16 October 2019 09:37:00 +0000 (0:00:00.090) 0:00:17.153
TASK [splunk_common : Enable the Splunk-to-Splunk port]
changed: [localhost]
Wednesday 16 October 2019 09:37:07 +0000 (0:00:06.776) 0:00:23.930
Wednesday 16 October 2019 09:37:07 +0000 (0:00:00.041) 0:00:23.972
Wednesday 16 October 2019 09:37:07 +0000 (0:00:00.045) 0:00:24.017
Wednesday 16 October 2019 09:37:07 +0000 (0:00:00.044) 0:00:24.062
Wednesday 16 October 2019 09:37:07 +0000 (0:00:00.045) 0:00:24.107
Wednesday 16 October 2019 09:37:07 +0000 (0:00:00.039) 0:00:24.147
included: /opt/ansible/roles/splunk_common/tasks/start_splunk.yml for localhost
Wednesday 16 October 2019 09:37:08 +0000 (0:00:00.096) 0:00:24.243
TASK [splunk_common : Get Splunk status]
ok: [localhost]
Wednesday 16 October 2019 09:37:09 +0000 (0:00:01.360) 0:00:25.603
TASK [splunk_common : Start Splunk via cli]
changed: [localhost]
Wednesday 16 October 2019 09:37:19 +0000 (0:00:10.177) 0:00:35.781
Wednesday 16 October 2019 09:37:19 +0000 (0:00:00.061) 0:00:35.842
Wednesday 16 October 2019 09:37:19 +0000 (0:00:00.110) 0:00:35.953
TASK [splunk_common : Wait for splunkd management port]
ok: [localhost]
Wednesday 16 October 2019 09:37:20 +0000 (0:00:00.397) 0:00:36.351
included: /opt/ansible/roles/splunk_common/tasks/set_certificate_prefix.yml for localhost
Wednesday 16 October 2019 09:37:20 +0000 (0:00:00.093) 0:00:36.444
TASK [splunk_common : Test basic https endpoint]
ok: [localhost]
Wednesday 16 October 2019 09:37:20 +0000 (0:00:00.702) 0:00:37.146
TASK [splunk_common : Set url prefix for future REST calls]
ok: [localhost]
Wednesday 16 October 2019 09:37:20 +0000 (0:00:00.047) 0:00:37.194
Wednesday 16 October 2019 09:37:21 +0000 (0:00:00.047) 0:00:37.242
included: /opt/ansible/roles/splunk_common/tasks/clean_user_seed.yml for localhost
Wednesday 16 October 2019 09:37:21 +0000 (0:00:00.098) 0:00:37.340
TASK [splunk_common : Remove user-seed.conf]
ok: [localhost]
Wednesday 16 October 2019 09:37:21 +0000 (0:00:00.162) 0:00:37.502
included: /opt/ansible/roles/splunk_common/tasks/add_splunk_license.yml for localhost
Wednesday 16 October 2019 09:37:21 +0000 (0:00:00.120) 0:00:37.623
Wednesday 16 October 2019 09:37:21 +0000 (0:00:00.049) 0:00:37.672
TASK [splunk_common : Apply Splunk license]
fatal: [localhost]: FAILED! => {}

MSG:

No file was found when using first_found. Use the 'skip: true' option to allow this task to be skipped if no files are found

...ignoring
Wednesday 16 October 2019 09:37:21 +0000 (0:00:00.046) 0:00:37.719
Wednesday 16 October 2019 09:37:21 +0000 (0:00:00.038) 0:00:37.757
Wednesday 16 October 2019 09:37:21 +0000 (0:00:00.041) 0:00:37.799
Wednesday 16 October 2019 09:37:21 +0000 (0:00:00.049) 0:00:37.849
Wednesday 16 October 2019 09:37:21 +0000 (0:00:00.040) 0:00:37.890
Wednesday 16 October 2019 09:37:21 +0000 (0:00:00.043) 0:00:37.934
Wednesday 16 October 2019 09:37:21 +0000 (0:00:00.052) 0:00:37.986
Wednesday 16 October 2019 09:37:21 +0000 (0:00:00.052) 0:00:38.039
included: /opt/ansible/roles/splunk_standalone/tasks/../../splunk_common/tasks/check_for_required_restarts.yml for localhost
Wednesday 16 October 2019 09:37:21 +0000 (0:00:00.099) 0:00:38.139
TASK [splunk_standalone : Check for required restarts]
ok: [localhost]
Wednesday 16 October 2019 09:37:22 +0000 (0:00:00.406) 0:00:38.545
Wednesday 16 October 2019 09:37:22 +0000 (0:00:00.043) 0:00:38.589
included: /opt/ansible/roles/splunk_common/tasks/check_for_required_restarts.yml for localhost
Wednesday 16 October 2019 09:37:22 +0000 (0:00:00.077) 0:00:38.666
TASK [Check for required restarts]
ok: [localhost]
PLAY RECAP
localhost : ok=43 changed=6 unreachable=0 failed=0 skipped=34 rescued=0 ignored=1

Wednesday 16 October 2019 09:37:22 +0000 (0:00:00.274) 0:00:38.940

splunk_common : Start Splunk via cli ----------------------------------- 10.18s
splunk_common : Enable the Splunk-to-Splunk port ------------------------ 6.78s
Gathering Facts --------------------------------------------------------- 4.24s
splunk_common : Update /opt/splunk/etc ---------------------------------- 3.38s
splunk_common : Update Splunk directory owner --------------------------- 2.12s
splunk_common : Hash the password --------------------------------------- 1.42s
splunk_common : Get Splunk status --------------------------------------- 1.36s
splunk_common : Check for existing installation ------------------------- 1.06s
splunk_common : Check if we are in a docker ----------------------------- 0.87s
splunk_common : Check if /sbin/updateetc.sh exists ---------------------- 0.84s
splunk_common : Test basic https endpoint ------------------------------- 0.70s
splunk_common : Generate user-seed.conf (Linux) ------------------------- 0.50s
splunk_standalone : Check for required restarts ------------------------- 0.41s
splunk_common : Wait for splunkd management port ------------------------ 0.40s
splunk_common : Find manifests ------------------------------------------ 0.33s
Check for required restarts --------------------------------------------- 0.27s
splunk_common : Create .ui_login ---------------------------------------- 0.21s
splunk_common : Remove user-seed.conf ----------------------------------- 0.16s
Provision role ---------------------------------------------------------- 0.15s

splunk_common : include_tasks ------------------------------------------- 0.14s

Ansible playbook complete, will begin streaming var/log/splunk/splunkd_stderr.log

0 Karma