Installation

splnkd can't find libjemalloc.so.1

frnkhng
Engager

Hi All,

I installed splunk enterprise in a RedHat Enterprise Linux x86_64 with rpm sucessfully.

But when I run the splunkd, there is below error:

bin/splunkd: error while loading shared libraries: libjemalloc.so.1: cannot open shared object file: No such file or directory

I checked and found the libjemalloc.so.1 and libjemalloc.so in /usr/local/lib, why splunk can't find it?

Tags (2)
1 Solution

Ayn
Legend

You shouldn't be running splunkd directly. You should run bin/splunk which is responsible for setting up the proper environment for splunkd to operate in, and it then launches splunkd.

View solution in original post

jg3
New Member

maybe do this:
sudo ln -s /opt/splunk/bin/splunk /etc/init.d/.
... so when your system restarts the correct splunk binary gets the "start" signal.

If you followed the documentation for installing and starting splunk the first time, you probably assumed (as I did) that calling sudo -u splunk /opt/splunk/bin/splunkd start —accept-license would work for subsequent starts, and then got the libjemalloc.so.1 error. As mentioned above, giving the start command to the splunk binary (not splunkd) solves this. So the real answer to your question (assuming you've installed in the default /opt/splunk/ path) is:

sudo /opt/splunk/bin/splunk start

0 Karma

mikemaki
Engager

sudo $SPLUNK_HOME/bin/splunk start

marcoscala
Builder

Same error running the following command:

./btprobe -d /opt/splunk/var/lib/splunk/fishbucket/splunk_private_db/ --file /opt/splunk/var/log/
/opt/splunk/bin/splunkd: error while loading shared libraries: libjemalloc.so.1: cannot open shared object file: No such file or directory

uname -a:
Linux 2.6.32-220.17.1.el6.x86_64 #1 SMP Thu Apr 26 13:37:13 EDT 2012 x86_64 x86_64 x86_64 GNU/Linux

MuS
Legend

Hi marco, this is the same run btool like this

$SPLUNK_HOME/bin/splunk cmd btool .....

Ayn
Legend

You shouldn't be running splunkd directly. You should run bin/splunk which is responsible for setting up the proper environment for splunkd to operate in, and it then launches splunkd.

Get Updates on the Splunk Community!

What's New in Splunk Enterprise 9.4: Features to Power Your Digital Resilience

Hey Splunky People! We are excited to share the latest updates in Splunk Enterprise 9.4. In this release we ...

Take Your Breath Away with Splunk Risk-Based Alerting (RBA)

WATCH NOW!The Splunk Guide to Risk-Based Alerting is here to empower your SOC like never before. Join Haylee ...

SignalFlow: What? Why? How?

What is SignalFlow? Splunk Observability Cloud’s analytics engine, SignalFlow, opens up a world of in-depth ...