Error - Warning: cannot create ":\new\path\for\index" when starting Splunk

[mookiie2005]

We are gettiong the below error information when trying to start the splunk service:

win-service: Starting as a Windows service: will run various system checks first...
win-service: Error running pre-flight-checks (_pclose returned 10).
win-service: Here is the output from running pre-flight-checks:
Checking index directory...
Creating: :\new\path\for\index
Warning: cannot create ":\new\path\for\index"
<<<<< EOF (pre-flight-checks)

Anyone received this error before? It is keeping our Splunkd service from starting.

[hesron]

chmod -R splunk:splunk /new/path/indexes

[Nextbeat]

I think you meant chown, but setting permissions for /IndexedData worked for me.

[mookiie2005 · Accepted solution]

We actually found the problem to be within the "splunk-launch.conf" file in the Program Files_Splunk_etc. The SPLUNK_DB path was set to SPLUNK_DB=new_path_for_index. This was an invalid location and so caused the error. Not sure how it got set that way as all we did was add a new index. We preformed the same operation on our other indexer and did not encounter any issues. Hope this helps someone else.

[linu1988]

Check if splunk has access to create index at that path. Check the service running under which account. If its not local give the account full access to that path and if its local account, give the local user full privilege. That will solve your issue.