- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Receiving the following error: "failed to start splunk.service: unit splunk.service not found"
After installing Splunk on my Ubuntu, I can't get it to start.
I get this error "failed to start splunk.service: unit splunk.service not found."
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Couple of reasons that might cause this issue
- splunk boot start is not enabled as the splunk user
- daemon-reload might have failed
please try the below steps
- systemctl daemon-reload
- the run the boot start command ( if already enabled it should say file exists)
- run the old method for starting and stopping splunk ( start should fail asking the system password)
- run systemctl start Splunkd ( should start splunk)
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Had the same issue and going back through these steps AzmathShaik gave resolved it for me.
A little more detail...
- systemctl daemon-reload
- the run the boot start command ( if already enabled it should say file exists). ---###File is located at /etc/systemd/system/Splunkd.service. Might want to check who owns it with ls -la
- run the old method for starting and stopping splunk ( start should fail asking the system password)
### run $SPLUNK_HOME/bin/splunk <start/stop> - run systemctl start Splunkd ( should start splunk)
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Thanks! Worked for me too!
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content

Hi @olaitan2010
Did you have a chance to check out these answers? If any worked, please resolve this post by approving it! If your problem is still not solved, keep us updated so that someone else can help you.
Thanks for posting!
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content

Hello if you are sure that you've installed splunk in opt directory
then go to bin directory like this: cd /opt/splunk/bin/
now run this command from your bin directory: ./splunk start
or ./splunk restart
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Thanks, This fixed my issue. When I ran ./splunk start the upgrade started.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
hi,
i guess i have the same issue. but with your suggestion, splunk will not start with systemd, for example.
so, imho, there should other ways.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
This worked.
root@aryan-VirtualBox:~# cd /opt/splunk/bin/
root@aryan-VirtualBox:/opt/splunk/bin# ls
bloom jars scripts
bottle.py jp.py scrubber.py
btool jsmin searchtest
btprobe locktest setSplunkEnv
bzip2 locktool shc_upgrade_template.py
cherryd mongod signtool
classify mongod-3.4 slim
ColdStorageArchiver.py mongod_cc splunk
coldToFrozenExample.py node splunkd
copyright.txt openssl splunkdj
dbmanipulator.py parsetest splunkmon
exporttool parse_xml_buckets.py splunk-optimize
fill_summary_index.py pcregextest splunk-optimize-lex
genAuditKeys.py pid_check.sh srm
genRootCA.sh python tarit.py
genSignedServerCert.py python2 tocsv.py
genSignedServerCert.sh python2.7 tsidxprobe
genWebCert.py recover-metadata tsidxprobe_plo
genWebCert.sh rest_handler.py tsidx_scan.py
importtool runScript.py untarit.py
installit.py safe_restart_cluster_master.py walklex
root@aryan-VirtualBox:/opt/splunk/bin# ./splunk start
The splunk daemon (splunkd) is already running.
If you get stuck, we're here to help.
Look for answers here: http://docs.splunk.com
The Splunk web interface is at http://aryan-VirtualBox:8000
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content

It looks like you are trying to start using systemd except you got the servicename wrong. By default it is
systemctl start Splunkd
(capital S)
