Hi,
I am trying to setup latest version Splunk Forwarder first time on a linux server. However, after exeuting below command, I am geeting errors. Please suggest what could be the issue here?
/splunk/splunkforwarder/bin> ./splunk start --accept-license
This appears to be your first time running this version of Splunk.
Splunk software must create an administrator account during startup. Otherwise, you cannot log in.
Create credentials for the administrator account.
Characters do not appear on the screen when you type in credentials.
Please enter an administrator username: administrator
Password must contain at least:
* 8 total printable ASCII character(s).
Please enter a new password:
Please confirm new password:
Splunk> Like an F-18, bro.
Checking prerequisites...
Checking mgmt port [8089]: open
Creating: /splunk/splunkforwarder/var/lib/splunk
Creating: /splunk/splunkforwarder/var/run/splunk
Creating: /splunk/splunkforwarder/var/run/splunk/appserver/i18n
Creating: /splunk/splunkforwarder/var/run/splunk/appserver/modules/static/css
Creating: /splunk/splunkforwarder/var/run/splunk/upload
Creating: /splunk/splunkforwarder/var/spool/splunk
Creating: /splunk/splunkforwarder/var/spool/dirmoncache
Creating: /splunk/splunkforwarder/var/lib/splunk/authDb
Creating: /splunk/splunkforwarder/var/lib/splunk/hashDb
ERROR: pid 27238 terminated with signal 11
SSL certificate generation failed.
Reffering to this link: https://splunkcommunities.force.com/customers/apex/ArticleDetailPage?URLName=Splunk-Won-t-Start-ERRO...
Resolution is ::
The main reason of this issue/error is because of an app of the Operating System (OS) named CylancePROTECT, it won’t let Splunk to create the certificates, so Splunk won’t be able to startCustomer will be able to start up Splunk after disabling Cylance.
Is there a way around this that we dont have to disable the security software?
