Installation

Why am I not able to start newly installed Splunk on Macbook?

Engager

Hello,

I recently installed Splunk on my MacBook, but I'm not able to start the application. Anytime I open it, I get the following error in the terminal:

homePath='/Applications/Splunk/var/lib/splunk/audit/db' of index=_audit on unusable filesystem.
Validating databases (splunkd validatedb) failed with code '1'.  If you cannot resolve the issue(s) above after consulting documentation, please file a case online at http://www.splunk.com/page/submit_issue

If anyone has ever encountered this issue, please let me know how this could be fix.

Thank you!

Labels (1)
0 Karma
1 Solution

SplunkTrust
SplunkTrust

Have you tried this?

Add this line to $SPLUNK_HOME/etc/splunk-launch.conf

OPTIMISTIC_ABOUT_FILE_LOCKING = 1

https://answers.splunk.com/answers/306998/why-am-i-getting-homepathoptsplunkvarlibsplunkaudi.html
https://answers.splunk.com/answers/453977/macos-sierra-1012-kills-splunk.html

let me know if this helps!

View solution in original post

SplunkTrust
SplunkTrust

Have you tried this?

Add this line to $SPLUNK_HOME/etc/splunk-launch.conf

OPTIMISTIC_ABOUT_FILE_LOCKING = 1

https://answers.splunk.com/answers/306998/why-am-i-getting-homepathoptsplunkvarlibsplunkaudi.html
https://answers.splunk.com/answers/453977/macos-sierra-1012-kills-splunk.html

let me know if this helps!

View solution in original post

Engager

Hi mayurr98,

Thank you for quick response! Yes, this helped.

0 Karma
Don’t Miss Global Splunk
User Groups Week!

Free LIVE events worldwide 2/8-2/12
Connect, learn, and collect rad prizes and swag!