Why am I not able to start newly installed Splunk on Macbook?

[aliyev12]

Hello,

I recently installed Splunk on my MacBook, but I'm not able to start the application. Anytime I open it, I get the following error in the terminal:

homePath='/Applications/Splunk/var/lib/splunk/audit/db' of index=_audit on unusable filesystem.
Validating databases (splunkd validatedb) failed with code '1'.  If you cannot resolve the issue(s) above after consulting documentation, please file a case online at http://www.splunk.com/page/submit_issue

If anyone has ever encountered this issue, please let me know how this could be fix.

Thank you!

[mayurr98 · Accepted solution]

Have you tried this?

Add this line to $SPLUNK_HOME/etc/splunk-launch.conf

OPTIMISTIC_ABOUT_FILE_LOCKING = 1

https://answers.splunk.com/answers/306998/why-am-i-getting-homepathoptsplunkvarlibsplunkaudi.html
https://answers.splunk.com/answers/453977/macos-sierra-1012-kills-splunk.html

let me know if this helps!

[aliyev12]

Hi mayurr98,

Thank you for quick response! Yes, this helped.