Getting Data In

SSL Error installing Splunk Forwarder

vikas_sood
Explorer

Hi,

I am trying to setup latest version Splunk Forwarder first time on a linux server. However, after exeuting below command, I am geeting errors. Please suggest what could be the issue here?

 

/splunk/splunkforwarder/bin> ./splunk start --accept-license

 

This appears to be your first time running this version of Splunk.

 

Splunk software must create an administrator account during startup. Otherwise, you cannot log in.
Create credentials for the administrator account.
Characters do not appear on the screen when you type in credentials.

 

Please enter an administrator username: administrator
Password must contain at least:
   * 8 total printable ASCII character(s).
Please enter a new password:
Please confirm new password:

Splunk> Like an F-18, bro.

Checking prerequisites...
        Checking mgmt port [8089]: open
                Creating: /splunk/splunkforwarder/var/lib/splunk
                Creating: /splunk/splunkforwarder/var/run/splunk
                Creating: /splunk/splunkforwarder/var/run/splunk/appserver/i18n
                Creating: /splunk/splunkforwarder/var/run/splunk/appserver/modules/static/css
                Creating: /splunk/splunkforwarder/var/run/splunk/upload
                Creating: /splunk/splunkforwarder/var/spool/splunk
                Creating: /splunk/splunkforwarder/var/spool/dirmoncache
                Creating: /splunk/splunkforwarder/var/lib/splunk/authDb
                Creating: /splunk/splunkforwarder/var/lib/splunk/hashDb
ERROR: pid 27238 terminated with signal 11
SSL certificate generation failed.

 

 

Reffering to this link: https://splunkcommunities.force.com/customers/apex/ArticleDetailPage?URLName=Splunk-Won-t-Start-ERRO...

Resolution is ::
The main reason of this issue/error is because of an app of the Operating System (OS) named CylancePROTECT, it won’t let Splunk to create the certificates, so Splunk won’t be able to startCustomer will be able to start up Splunk after disabling Cylance.

 

Is there a way around this that we dont have to disable the security software?

Labels (1)
Tags (1)
0 Karma
Get Updates on the Splunk Community!

Index This | I am a number, but when you add ‘G’ to me, I go away. What number am I?

March 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...

What’s New in Splunk App for PCI Compliance 5.3.1?

The Splunk App for PCI Compliance allows customers to extend the power of their existing Splunk solution with ...

Extending Observability Content to Splunk Cloud

Register to join us !   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to ...