Installation

Why am I not able to start newly installed Splunk on Macbook?

aliyev12
Engager

Hello,

I recently installed Splunk on my MacBook, but I'm not able to start the application. Anytime I open it, I get the following error in the terminal:

homePath='/Applications/Splunk/var/lib/splunk/audit/db' of index=_audit on unusable filesystem.
Validating databases (splunkd validatedb) failed with code '1'.  If you cannot resolve the issue(s) above after consulting documentation, please file a case online at http://www.splunk.com/page/submit_issue

If anyone has ever encountered this issue, please let me know how this could be fix.

Thank you!

Labels (1)
0 Karma
1 Solution

mayurr98
Super Champion

Have you tried this?

Add this line to $SPLUNK_HOME/etc/splunk-launch.conf

OPTIMISTIC_ABOUT_FILE_LOCKING = 1

https://answers.splunk.com/answers/306998/why-am-i-getting-homepathoptsplunkvarlibsplunkaudi.html
https://answers.splunk.com/answers/453977/macos-sierra-1012-kills-splunk.html

let me know if this helps!

View solution in original post

mayurr98
Super Champion

Have you tried this?

Add this line to $SPLUNK_HOME/etc/splunk-launch.conf

OPTIMISTIC_ABOUT_FILE_LOCKING = 1

https://answers.splunk.com/answers/306998/why-am-i-getting-homepathoptsplunkvarlibsplunkaudi.html
https://answers.splunk.com/answers/453977/macos-sierra-1012-kills-splunk.html

let me know if this helps!

aliyev12
Engager

Hi mayurr98,

Thank you for quick response! Yes, this helped.

0 Karma
Get Updates on the Splunk Community!

Introducing the Splunk Community Dashboard Challenge!

Welcome to Splunk Community Dashboard Challenge! This is your chance to showcase your skills in creating ...

Get the T-shirt to Prove You Survived Splunk University Bootcamp

As if Splunk University, in Las Vegas, in-person, with three days of bootcamps and labs weren’t enough, now ...

Wondering How to Build Resiliency in the Cloud?

IT leaders are choosing Splunk Cloud as an ideal cloud transformation platform to drive business resilience,  ...