Permission Error [Errno 13] after upgrading Splunk

Path Finder

We encountered an error after we upgraded to a new version of Splunk. This Splunk instance is under a distributed environment and this is one of the indexers within a cluster. Please see the logs below after we run ./splunk status :




Exception: <class 'PermissionError'>, Value: [Errno 13] Permission denied: '/opt/splunk/etc/system/local                                                                                                                             /migration.conf'Traceback (most recent call last):
  File "/opt/splunk/lib/python3.7/site-packages/splunk/clilib/", line 1359, in <module>
  File "/opt/splunk/lib/python3.7/site-packages/splunk/clilib/", line 1212, in main
  File "/opt/splunk/lib/python3.7/site-packages/splunk/clilib/", line 1067, in parseAndRun
    retVal = cList.getCmd(command, subCmd).call(argList, fromCLI = True)
  File "/opt/splunk/lib/python3.7/site-packages/splunk/clilib/", line 293, in call
    return self.func(args, fromCLI)
  File "/opt/splunk/lib/python3.7/site-packages/splunk/clilib/", line 35, in wrapperFunc
    return func(dictCopy, fromCLI)
  File "/opt/splunk/lib/python3.7/site-packages/splunk/clilib/", line 189, in firstTimeRun
    migration.autoMigrate(args[ARG_LOGFILE], isDryRun)
  File "/opt/splunk/lib/python3.7/site-packages/splunk/clilib/", line 3166, in autoMigrate
    checkTimezones(CONF_PROPS, dryRun)
  File "/opt/splunk/lib/python3.7/site-packages/splunk/clilib/", line 411, in checkTimezones
    migSettings = comm.readConfFile(PATH_MIGRATION_CONF)
  File "/opt/splunk/lib/python3.7/site-packages/splunk/clilib/", line 172, in readConfFile
    f = open(path, 'rb')
PermissionError: [Errno 13] Permission denied: '/opt/splunk/etc/system/local/migration.conf'Please file a case online at




We also tried the "chown" command but still no luck.



Labels (2)
0 Karma


try to change ownership to entire Splunk directory, not only to specific folder and then try to restart Splunk and verify. Make sure you change ownership to right user, I just gave <user> as example below 

Eg: If splunk is installed in location - /opt/splunk

- Go to /opt directory

- run command -->  sudo chown -R user:user splunk

- Restart splunk 


Hope this helps !!! Good luck 


0 Karma
Get Updates on the Splunk Community!

Optimize Cloud Monitoring

  TECH TALKS Optimize Cloud Monitoring Tuesday, August 13, 2024  |  11:00AM–12:00PM PST   Register to ...

What's New in Splunk Cloud Platform 9.2.2403?

Hi Splunky people! We are excited to share the newest updates in Splunk Cloud Platform 9.2.2403! Analysts can ...

Stay Connected: Your Guide to July and August Tech Talks, Office Hours, and Webinars!

Dive into our sizzling summer lineup for July and August Community Office Hours and Tech Talks. Scroll down to ...