Hello,
When I go to services.msc I have splunkd set up to restart as a user with a u/n and p/w. However, it does not automatically start when the server restarts. This is happening on several servers, including a search head and forwarders.
Does anybody else have this issue or any ideas on how I can fix it?
Thanks,
Alex
I'd first check the event viewer to see if it casts any light on the reason.
A few more questions/comments to help pinpoint where things are going wrong:
Note that if you set it to autostart(delayed) it can take several minutes to actually start, so don't be in a hurry.
If I had to make a guess with just the existing information, I'd say it's a domain account and for some reason domain services aren't available soon enough after bootup for the Splunk service to log in properly. The fix in that case would be to set the delayed start or set an appropriate dependency on the right services.
It is a domain user.
Any other ideas?
Thanks,
Alex
Hi @Alex,
I am facing the same issue. If you were able to resolve it, please share your solution.
Thanks,
Dev