I'm getting the following error when splunk is attempting to start up
Operation "read_pid" failed in /opt/splunk/src/libzero/conf-mutator-locking.c:339, conf_mutator_lock(); Operation not permitted
I've checked all of the permissions and what not and everything looks to be in order. I however do not have a src path in my main splunk directory. I also just installed the update to 8.0 as well to ensure that all was right in the world. But I was getting this error on the 7.3 that I upgraded from. Thank you all for your help with this.
The solution in the link provided by @mayurr98 was what I needed. Thanks.
this may help:
Thank you for the note on that, I'm taking a look at it now.
Great, you could accept the answer to close this question.