Getting Data In

Why does btool quit with "SPLUNK_HOME must be set. Stopping."?

mykol_j
Communicator

My GoogleFu is failing me. There's a lot of btool tutorials, but I can't find this solution...

I'm on a Windows 10 system, trying to debug the effective config of it's universal client. This same message with both command prompt (cmd.exe) and with PowerShell.

I think it's apparent that it's a variable setting, somewhere, but where?

Labels (1)
0 Karma
1 Solution

somesoni2
Revered Legend

Probably need to set environment variable SPLUNK_HOME. Try suggestion from this post

https://www.reddit.com/r/Splunk/comments/3zrobq/quick_way_to_set_environmental_variables_windows/

View solution in original post

PickleRick
SplunkTrust
SplunkTrust

That's a typical message when you try to run btool on its own.

See the difference:

PickleRick_0-1679066496611.png

 

John_Littleton
Explorer

Check C:\Program Files\SplunkUniversalForwarder\etc\splunk-launch.conf and make sure SPLUNK_HOME is set to where you installed. Typically

SPLUNK_HOME=C:\Program Files\SplunkUniversalForwarder 

mykol_j
Communicator

Thanks! That's it, for some reason that was commented out.

# SPLUNK_HOME=C:\Program Files\SplunkUniversalForwarder

0 Karma

somesoni2
Revered Legend

Probably need to set environment variable SPLUNK_HOME. Try suggestion from this post

https://www.reddit.com/r/Splunk/comments/3zrobq/quick_way_to_set_environmental_variables_windows/

Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Why Splunk Customers Should Attend Cisco Live 2026 Las Vegas

Why Splunk Customers Should Attend Cisco Live 2026 Las Vegas     Cisco Live 2026 is almost here, and this ...

What Is the Name of the USB Key Inserted by Bob Smith? (BOTS Hint, Not the Answer)

Hello Splunkers,   So you searched, “what is the name of the usb key inserted by bob smith?”  Not gonna lie… ...

Automating Threat Operations and Threat Hunting with Recorded Future

    Automating Threat Operations and Threat Hunting with Recorded Future June 29, 2026 | Register   Is your ...