ERROR BTreeCP - checkpoint failed: removal of dir /opt/splunkforwarder/var/lib/splunk/fishbucket/splunk_private_db/snapshot.old failed: Directory not empty

[kishen2017]

Why I am getting "ERROR BTreeCP - checkpoint failed: removal of dir /opt/splunkforwarder/var/lib/splunk/fishbucket/splunk_private_db/snapshot.old failed: Directory not empty" error message in splunkd.log and also indexing is not happening during this message period.

[murali18]

Go to this folder and check:
/opt/splunkforwarder/var/lib/splunk/fishbucket/splunk_private_db.

May be due to some Permission Issues.

[chrisyounger]

This usually happens if you run splunk as the root user and then try and run it later as the splunk user. Try this process:

be root
/opt/splunkforwarder/bin/splunk stop
ps -ef | grep splunk 

check nothing is running, then

chown -R splunk:splunk /opt/splunkforwarder 
su – splunk
/opt/splunkforwarder/bin/splunk start

[payal23]

@kishen2017 I am also facing the same prob. Did you got the fix?