My splunk instance no longer starts: 'The value of env var SPLUNK_OS_USER, "splunker", does not match any user on this system; exiting. Success

[bcapuyan]

Hi Everyone,

I can no longer start my splunk instance with the command #sudo ./splunk start. I get the following error.

The value of env var SPLUNK_OS_USER, "splunker", does not match any user on this system; exiting.: Success

I was prompted to restart my splunk service after I removed/ disabled receiving from another Splunk Forwarder. I also tried to upgrade from 6.1 to 6.2 and still get the same error.

Any help?

Thank you
-Bon

[MuS · Accepted solution]

Hi bcapuyan,

Check the docs http://docs.splunk.com/Documentation/Splunk/6.2.0/Admin/Splunk-launchconf and then your splunk-launch.conf

Cheers, MuS

[bcapuyan]

Thanks I just commented out the SPLUNK_OS_USER=splunker line and it started like a charm

SPLUNK_OS_User=splunker

[MuS]

As well check if the user exists and read this docs http://docs.splunk.com/Documentation/Splunk/6.2.0/installation/RunSplunkasadifferentornon-rootuser