Problem installing Splunk Enterprise on MacOS 10.13.1: Validating databases (splunkd validatedb) failed with code '1'

New Member

Trying to start the labs in the Splunk fundamentals course but Splunk won't load on my MacBook. This is the message I get:

Validating databases (splunkd validatedb) failed with code '1'. If you cannot resolve the issue(s) above after consulting documentation, please file a case online at

Anybody know what I should do?

Labels (2)
Tags (2)
0 Karma


Hi @1dodgeneon,

Can you please check answers on , this might help you.

You need to add OPTIMISTIC_ABOUT_FILE_LOCKING = 1 in $SPLUNK_HOME/etc/splunk-launch.conf

I hope this helps.


New Member

I have the same issue. I'm not familiar with coding and stuff at all. Just interested in Splunk. How do I add a line in $SPLUNK_HOME/etc/splunk-launch.conf ? Could you maybe assist me? Thanks!

0 Karma

New Member

Hi Claudia,

I am in the same boat. I am not sure what tool to use to read this file. Do you know? have you figured it out yet?


0 Karma

New Member

It worked. Thanks.

0 Karma

Splunk Employee
Splunk Employee

But see this important note from the other Answers posting

Note from malmoore (Splunk): You set this variable at your own risk. Proceed with caution. By setting the variable, you defeat filesystem locking checks, and thus can potentially render any data that you index inaccessible later. Splunk Free/Trial need to know how to navigate your file system so that it can store (and later retrieve) index buckets. We have already had one report in this thread of problems that have occurred after enabling this setting. There is work scheduled to fix the error for macOS 10.13, but there is no promise of delivery of this functionality. Remember, there is no support at all for Splunk Enterprise on macOS 10.13.

0 Karma
Get Updates on the Splunk Community!

Splunk APM & RUM | Upcoming Planned Maintenance

There will be planned maintenance of the streaming infrastructure for Splunk APM and Splunk RUM in the coming ...

Part 2: Diving Deeper With AIOps

Getting the Most Out of Event Correlation and Alert Storm Detection in Splunk IT Service Intelligence   Watch ...

User Groups | Upcoming Events!

If by chance you weren't already aware, the Splunk Community is host to numerous User Groups, organized ...