Security

Splunk does not auto start (boot-start)

hvazquez
Engager

I installed Splunk in RHEL 8.9. I set it up to boot-start, however, splunk does not automatically run after reboot. I followed the instructions within this document.

Configure Splunk Enterprise to start at boot time - Splunk Documentation

Labels (1)
0 Karma
1 Solution

isoutamo
SplunkTrust
SplunkTrust

Hi

In RHEL 8.9 you should use this version Enable boot-start on machines that run systemd

And before that you must change ownership of all files which splunk is using to user splunk (or what ever user you are using for run splunk).

r. Ismo

View solution in original post

isoutamo
SplunkTrust
SplunkTrust

Hi

In RHEL 8.9 you should use this version Enable boot-start on machines that run systemd

And before that you must change ownership of all files which splunk is using to user splunk (or what ever user you are using for run splunk).

r. Ismo

hvazquez
Engager

Ismo,

Thanks for the guidance. The systemd worked.

 

V/r,

Hector

richgalloway
SplunkTrust
SplunkTrust

What is the EXACT command you entered to enable boot-start?   Saying you followed the instructions on a certain web page doesn't help if that page contains several different methods for doing the thing - we have no way of knowing which you used.

---
If this reply helps you, Karma would be appreciated.
0 Karma
Get Updates on the Splunk Community!

Take Your Breath Away with Splunk Risk-Based Alerting (RBA)

WATCH NOW!The Splunk Guide to Risk-Based Alerting is here to empower your SOC like never before. Join Haylee ...

Industry Solutions for Supply Chain and OT, Amazon Use Cases, Plus More New Articles ...

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...

Enterprise Security Content Update (ESCU) | New Releases

In November, the Splunk Threat Research Team had one release of new security content via the Enterprise ...