Unable to Start Splunk Service on Windows- failed with ERROR ConfObjectManagerDB - Cannot initialize: D:\Program Files\Splunk\etc\apps\ learned\metadata\default.meta: The operation completed successfully."

[rbal_splunk]

We are able to start splunk services - But getting following error while starting the services in Heavy Forwarder

"ERROR ConfObjectManagerDB - Cannot initialize: D:\Program Files\Splunk\etc\apps\
learned\metadata\default.meta: The operation completed successfully."

When I tried to launch the file default.meta file - It gives me an error as access denied. I am using Admin account to launch the file - Getting same message even after stopping the splunk services.

Tried to replace file from back up - still getting message as - I don’t have access to the perform the operation.

[rbal_splunk]

I will suggest you to try steps recommend below, before performing these steps please stop the splunk service.

From windows explorer- navigate to the Splunk folder and right click on the Splunk Properties
In the ‘Splunk Properties’, click on tab ‘Security’
On the Security Tab, click on “Advanced”.
Now you will be in context of ‘Advanced Security Setting for Splunk”, here click on ‘Owner’.

You will see the list of owner, here click ‘Edit’, where you can pick the user who will run the splunk service.
Once you pickup the user , select check box “Replace owner on sub containers and objects” and Apply.
Please restart the Splunk service and see if it helps.