I am trying to migrate from 3.4.14 to 4.0.11 on Linux. It all goes smoothly, and it starts without error. However, when I go to look at splunkweb, it hangs for a while, then says:
500 Internal Server Error IOError: [Errno 37] No locks available
Can anyone rent me a clue as to what might be going on here?
Steve
Probably your file locks (ulimit -x
) is set too low. You should increase it (e.g., ulimit -x unlimited
) for the Splunk process before starting Splunk, and preferably set it high permanently for the Splunk process user.
Nope, ulimit -x was already set to unlimited.