I can,t boot splunk 7.2

New Member


I installed the splunkforwarder-7.2.4 version in a windows 7. It has apparently been installed well. I have made the -auth for the permissions and I have located the inputs.conf, but when I try to launch the splunk.exe (splunk start) a black window appears that I do not have time to visualize and it does not start.
I have the version of Enterprise splunk-7.2.2 installed and I am working with it, without problems.
Can you lend me a hand?

Thank you.

Tags (1)
0 Karma

Splunk Employee
Splunk Employee


Have you tried to start the splunk forwarder service via the services app in the administrative tools, not by calling directly splunk start ?

0 Karma


Hi silrodgar,

Start a CMD in administrative mode and start Splunk from that CMD. It will try to start Splunk, show startup messages, and will stay open afterwards.

Also, you can check splunkd.log in $SPLUNK_HOME/var/log/splunk/ for any messages related to the failure.

Hope this helps ...

cheers, MuS

0 Karma


The user your are trying to launch splunk.exe has all the necessary permissions? Another question, have you checked the splunk process status, using the "splunk status" command on CLI?

0 Karma
Get Updates on the Splunk Community!

Observability Newsletter Highlights | March 2023

 March 2023 | Check out the latest and greatestSplunk APM's New Tag Filter ExperienceSplunk APM has updated ...

Security Newsletter Updates | March 2023

 March 2023 | Check out the latest and greatestUnify Your Security Operations with Splunk Mission Control The ...

Platform Newsletter Highlights | March 2023

 March 2023 | Check out the latest and greatestIntroducing Splunk Edge Processor, simplified data ...