Getting Data In
Highlighted

Splunk takes long time to start

Path Finder

I've got a newly installed Indexer on RHEL 6.6. It isn't indexing any data. When I restart the Splunk instance with "./splunk restart", it takes approximately 10-15 minutes to start up. It shuts down quickly, but once it begins the starting process, it displays this much data and then after 10 minutes it finishes:

Splunk> See your world. Maybe wish you hadn't.

Checking prerequisites...
Checking http port [8000]: open
Checking mgmt port [8089]: open
Checking appserver port [127.0.0.1:8065]: open
Checking kvstore port [8191]: open

Tags (4)
0 Karma
Highlighted

Re: Splunk takes long time to start

Path Finder

We had an internal issue with auto mounter. For some odd reason, Splunk touches /home/build/ when you issue any command to it (e.g., ./splunk --help or ./splunk restart). This directory didn't exist, and instead of throwing an error, the process hung for upwards of 10-15 minutes. I corrected our issue by just creating an empty directory at /home/build/. Now Splunk restarts on a dime!

View solution in original post

0 Karma