Permission Error [Errno 13] after upgrading Splunk

Path Finder

We encountered an error after we upgraded to a new version of Splunk. This Splunk instance is under a distributed environment and this is one of the indexers within a cluster. Please see the logs below after we run ./splunk status :




Exception: <class 'PermissionError'>, Value: [Errno 13] Permission denied: '/opt/splunk/etc/system/local                                                                                                                             /migration.conf'Traceback (most recent call last):
  File "/opt/splunk/lib/python3.7/site-packages/splunk/clilib/", line 1359, in <module>
  File "/opt/splunk/lib/python3.7/site-packages/splunk/clilib/", line 1212, in main
  File "/opt/splunk/lib/python3.7/site-packages/splunk/clilib/", line 1067, in parseAndRun
    retVal = cList.getCmd(command, subCmd).call(argList, fromCLI = True)
  File "/opt/splunk/lib/python3.7/site-packages/splunk/clilib/", line 293, in call
    return self.func(args, fromCLI)
  File "/opt/splunk/lib/python3.7/site-packages/splunk/clilib/", line 35, in wrapperFunc
    return func(dictCopy, fromCLI)
  File "/opt/splunk/lib/python3.7/site-packages/splunk/clilib/", line 189, in firstTimeRun
    migration.autoMigrate(args[ARG_LOGFILE], isDryRun)
  File "/opt/splunk/lib/python3.7/site-packages/splunk/clilib/", line 3166, in autoMigrate
    checkTimezones(CONF_PROPS, dryRun)
  File "/opt/splunk/lib/python3.7/site-packages/splunk/clilib/", line 411, in checkTimezones
    migSettings = comm.readConfFile(PATH_MIGRATION_CONF)
  File "/opt/splunk/lib/python3.7/site-packages/splunk/clilib/", line 172, in readConfFile
    f = open(path, 'rb')
PermissionError: [Errno 13] Permission denied: '/opt/splunk/etc/system/local/migration.conf'Please file a case online at




We also tried the "chown" command but still no luck.



Labels (2)
0 Karma


try to change ownership to entire Splunk directory, not only to specific folder and then try to restart Splunk and verify. Make sure you change ownership to right user, I just gave <user> as example below 

Eg: If splunk is installed in location - /opt/splunk

- Go to /opt directory

- run command -->  sudo chown -R user:user splunk

- Restart splunk 


Hope this helps !!! Good luck 


0 Karma
Get Updates on the Splunk Community!

Index This | How many sides does a circle have?

February 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...

Registration for Splunk University is Now Open!

Are you ready for an adventure in learning?   Brace yourselves because Splunk University is back, and it's ...

Splunkbase | Splunk Dashboard Examples App for SimpleXML End of Life

The Splunk Dashboard Examples App for SimpleXML will reach end of support on Dec 19, 2024, after which no new ...