Security

Splunk does not auto start (boot-start)

hvazquez
Engager

I installed Splunk in RHEL 8.9. I set it up to boot-start, however, splunk does not automatically run after reboot. I followed the instructions within this document.

Configure Splunk Enterprise to start at boot time - Splunk Documentation

Labels (1)
0 Karma
1 Solution

isoutamo
SplunkTrust
SplunkTrust

Hi

In RHEL 8.9 you should use this version Enable boot-start on machines that run systemd

And before that you must change ownership of all files which splunk is using to user splunk (or what ever user you are using for run splunk).

r. Ismo

View solution in original post

isoutamo
SplunkTrust
SplunkTrust

Hi

In RHEL 8.9 you should use this version Enable boot-start on machines that run systemd

And before that you must change ownership of all files which splunk is using to user splunk (or what ever user you are using for run splunk).

r. Ismo

hvazquez
Engager

Ismo,

Thanks for the guidance. The systemd worked.

 

V/r,

Hector

richgalloway
SplunkTrust
SplunkTrust

What is the EXACT command you entered to enable boot-start?   Saying you followed the instructions on a certain web page doesn't help if that page contains several different methods for doing the thing - we have no way of knowing which you used.

---
If this reply helps you, Karma would be appreciated.
0 Karma
Get Updates on the Splunk Community!

Enterprise Security Content Update (ESCU) | New Releases

In December, the Splunk Threat Research Team had 1 release of new security content via the Enterprise Security ...

Why am I not seeing the finding in Splunk Enterprise Security Analyst Queue?

(This is the first of a series of 2 blogs). Splunk Enterprise Security is a fantastic tool that offers robust ...

Index This | What are the 12 Days of Splunk-mas?

December 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...