- Splunk Answers
- :
- Splunk Administration
- :
- Monitoring Splunk
- :
- Windows could not start the Splunkd (or SplunkForw...
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark Topic
- Subscribe to Topic
- Mute Topic
- Printer Friendly Page
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
This may have already been posted but I couldn't find it and I burnt up about 2-3 hours scratching my head...
After a service restart, if you get the following error message:
"Windows could not start the Splunkd service on Local Computer. Error 2: The system cannot find the file specified."
Answer can be found below. I hope it helps someone save some time.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Windows key + r Type regedit HKLM > System > CurrentControlSet > services > Splunkd (or SplunkForwarder) If ImagePath has quotes in it, delete them and start the service.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Windows key + r Type regedit HKLM > System > CurrentControlSet > services > Splunkd (or SplunkForwarder) If ImagePath has quotes in it, delete them and start the service.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
This didn't work for me either and I also receive:
Error 1067: The process terminated unexpectedly.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
The answer did not work when I tried it
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
What do you do when DoD IA policies flag this as a possible security violation and require the quotes?
Get Your Exclusive Splunk Certified Cybersecurity Defense Engineer at Splunk .conf24 ...
Share Your Ideas & Meet the Lantern team at .Conf! Plus All of This Month’s New ...
Combine Multiline Logs into a Single Event with SOCK: a Step-by-Step Guide for ...
