Hello Team,
I had followed steps mentioned in below page for migration to Splunk Enterprise version 9.2.1:
Upgrade to version 9.2 on UNIX - Splunk Documentation
I receive below error on running start command. Due to this error, I am unable to complete the migration on Splunk indexer machine.
Warning: cannot create "/data/splunk/index_data"
Creating: /data/splunk/index_data
ERROR while running renew-certs migration.
i have the same situation when i try to migration my splunk from old server RHEL6.9 to new RHEL8.8
i did rsync complete and created user splunk as new server
ran rpm -i of same version to the new server and shows complete with zero error, however when i went to /opt/splunk/bin and ./splunk start it shows same error like you.
May i know any update of yours, did you fixed ?
This looks like looks like filesystem permissions.
The splunk paths are normally based on the splunk account user permissions
example
sudo chown -R splunk:splunk <YOUR DATA PATH>
Find out what account Splunk was running under.
Or - if the permissions look right - a SELinux mislabeling issue.