Security

Splunk does not auto start (boot-start)

hvazquez
Engager

I installed Splunk in RHEL 8.9. I set it up to boot-start, however, splunk does not automatically run after reboot. I followed the instructions within this document.

Configure Splunk Enterprise to start at boot time - Splunk Documentation

0 Karma
1 Solution

isoutamo
SplunkTrust
SplunkTrust

Hi

In RHEL 8.9 you should use this version Enable boot-start on machines that run systemd

And before that you must change ownership of all files which splunk is using to user splunk (or what ever user you are using for run splunk).

r. Ismo

View solution in original post

isoutamo
SplunkTrust
SplunkTrust

Hi

In RHEL 8.9 you should use this version Enable boot-start on machines that run systemd

And before that you must change ownership of all files which splunk is using to user splunk (or what ever user you are using for run splunk).

r. Ismo

hvazquez
Engager

Ismo,

Thanks for the guidance. The systemd worked.

 

V/r,

Hector

richgalloway
SplunkTrust
SplunkTrust

What is the EXACT command you entered to enable boot-start?   Saying you followed the instructions on a certain web page doesn't help if that page contains several different methods for doing the thing - we have no way of knowing which you used.

---
If this reply helps you, Karma would be appreciated.
0 Karma
Get Updates on the Splunk Community!

Fun with Regular Expression - multiples of nine

Fun with Regular Expression - multiples of nineThis challenge was first posted on Slack #regex channel ...

[Live Demo] Watch SOC transformation in action with the reimagined Splunk Enterprise ...

Overwhelmed SOC? Splunk ES Has Your Back Tool sprawl, alert fatigue, and endless context switching are making ...

What’s New & Next in Splunk SOAR

Security teams today are dealing with more alerts, more tools, and more pressure than ever.  Join us on ...