Installation

Upgrading from Splunk 6.3.2 to 6.3.3 on an Ubuntu server, why am I unable to start Splunk?

lakromani
Builder

Here is what I have done.

Ubuntu 15.10 running Splunk Enterprise 6.3.2 fine.
Download splunk-6.3.3-f44afce176d0-linux-2.6-amd64.deb to the server.

Installing:

dpkg -i splunk-6.3.3-f44afce176d0-linux-2.6-amd64.deb
(Reading database ... 140697 files and directories currently installed.)
Preparing to unpack splunk-6.3.3-f44afce176d0-linux-2.6-amd64.deb ...
This looks like an upgrade of an existing Splunk Server. Attempting to stop the installed Splunk Server...
Stopping splunkd...
Shutting down.  Please wait, as this may take a few minutes.
..
Stopping splunk helpers...

Done.
Unpacking splunk (6.3.3) over (6.3.2) ...
Setting up splunk (6.3.3) ...
complete

Web not responding, so I tried to start the service manually:

service splunk restart
Job for splunk.service failed because the control process exited with error code. See "systemctl status splunk.serv                              ice" and "journalctl -xe" for details.

Then look at error gives this:

systemctl status splunk.service
â splunk.service - LSB: Start splunk
   Loaded: loaded (/etc/init.d/splunk)
   Active: failed (Result: exit-code) since Fri 2016-02-05 09:13:50 CET; 9s ago
     Docs: man:systemd-sysv-generator(8)
  Process: 19007 ExecStop=/etc/init.d/splunk stop (code=exited, status=0/SUCCESS)
  Process: 19036 ExecStart=/etc/init.d/splunk start (code=exited, status=2)

Feb 05 09:13:50 Varg systemd[1]: Starting LSB: Start splunk...
Feb 05 09:13:50 Varg splunk[19036]: Starting Splunk...
Feb 05 09:13:50 Varg splunk[19036]: License not yet accepted, but executed with no-prompt flag.  Exiting.
Feb 05 09:13:50 Varg systemd[1]: splunk.service: Control process exited, code=exited status=2
Feb 05 09:13:50 Varg systemd[1]: Failed to start LSB: Start splunk.
Feb 05 09:13:50 Varg systemd[1]: splunk.service: Unit entered failed state.
Feb 05 09:13:50 Varg systemd[1]: splunk.service: Failed with result 'exit-code'.

Anyone have an idea on how to fix Failed to start LSB: Start splunk.?

Labels (1)
0 Karma
1 Solution

lakromani
Builder

Fond that I do need to run ./splunk start from the bin folder.
All is ok now...

View solution in original post

lakromani
Builder

Fond that I do need to run ./splunk start from the bin folder.
All is ok now...

abhishekreddy
Explorer

did you figured out why service splunk start didn't worked?

0 Karma

jplumsdaine22
Influencer

Glad you figured it out - do you mind making your comment an Answer to this question and then accepting it?

0 Karma
Get Updates on the Splunk Community!

Enterprise Security Content Update (ESCU) | New Releases

In December, the Splunk Threat Research Team had 1 release of new security content via the Enterprise Security ...

Why am I not seeing the finding in Splunk Enterprise Security Analyst Queue?

(This is the first of a series of 2 blogs). Splunk Enterprise Security is a fantastic tool that offers robust ...

Index This | What are the 12 Days of Splunk-mas?

December 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...