I can,t boot splunk 7.2

[silrodgar]

Hello!

I installed the splunkforwarder-7.2.4 version in a windows 7. It has apparently been installed well. I have made the -auth for the permissions and I have located the inputs.conf, but when I try to launch the splunk.exe (splunk start) a black window appears that I do not have time to visualize and it does not start.
I have the version of Enterprise splunk-7.2.2 installed and I am working with it, without problems.
Can you lend me a hand?

Thank you.

[maraman_splunk]

Hi,

Have you tried to start the splunk forwarder service via the services app in the administrative tools, not by calling directly splunk start ?

[MuS]

Hi silrodgar,

Start a CMD in administrative mode and start Splunk from that CMD. It will try to start Splunk, show startup messages, and will stay open afterwards.

Also, you can check splunkd.log in $SPLUNK_HOME/var/log/splunk/ for any messages related to the failure.

Hope this helps ...

cheers, MuS

[alonsocaio]

The user your are trying to launch splunk.exe has all the necessary permissions? Another question, have you checked the splunk process status, using the "splunk status" command on CLI?