Why ain't Start/stop splunk from deployment-server?

[Madhan45]

I'm not able to start/stop splunk. And it is passing some error in python2.7 from the directory splunk/lib.

So I just deleted the directory and tried. but still it is not working.

[ryanoconnor]

Do you happen to still have the error? What directory did you delete exactly?

[Madhan45]

yes still I have this error and i deleted splunk/lib/python2.7

[ryanoconnor]

Can you copy and paste the error? Also I might recommend a re-install of Splunk at this point. That's a critical directory.

[Madhan45]

Below is the error after the deleting that directory:

Could not find platform independent libraries
Could not find platform independent libraries
Consider setting $PYTHONHOME to [:]
ImportError: No module named site

What if I take the directory python2.7 from some other splunk instances ?
Will it lead to splunk crash???

[Madhan45]

I meant shall I copy & paste that directory from some other splunk instances and then restart?

Will it work?

[ryanoconnor]

If you grab that directory from a Splunk install of the same version it theoretically could. Keep in mind though that we may be chasing down two errors now, whatever the original error was and now the error related to a missing python directory in Splunk.

I would say you could give that a shot, but if it doesn't work I'd recommend backing up what's left of the directory, re-installing Splunk, and manually merging back any configs that are important from your backup.

[Madhan45]

Okay.. I got it..
Proactively I will reinstall splunk. That would be the best option.

Thanks..!!!

[ryanoconnor]

Good luck let me know how it works out!