Splunk Enterprise

Unable to start Splunkd

wildbill4
Path Finder

Getting the following when I try to start splunkd:

"/opt/splunk/bin/splunkd Error while loading shared libraries: lib.so.0.9.8: Cannot open shared object file: No such file or directory"

As far as I know nothing has been changed on the box since installation. I know the file exist at /opt/splunk/lib/lib.so.0.9.8. Any assistance is greatly appreciated.

Tags (1)
1 Solution

sdaniels
Splunk Employee
Splunk Employee

If you are trying to start splunk it should be like this /opt/splunk/bin/splunk start, and not the splunkd process. Just want to make sure you are starting it up properly. I've seen this before. Docs below.

http://docs.splunk.com/Documentation/Splunk/latest/Installation/Startsplunkforthefirsttime

View solution in original post

wildbill4
Path Finder

Same user used to start up. I don't see anything in the log files. Should I be looking at one specifically? Has been install for 4 or 5 months. Thanks for the help

0 Karma

sdaniels
Splunk Employee
Splunk Employee

If you are trying to start splunk it should be like this /opt/splunk/bin/splunk start, and not the splunkd process. Just want to make sure you are starting it up properly. I've seen this before. Docs below.

http://docs.splunk.com/Documentation/Splunk/latest/Installation/Startsplunkforthefirsttime

wildbill4
Path Finder

I started it with the /opt/splunk/bin/splunk start the first time. Then noticed that splunkd hadn't started and then did the /opt/splunk/bin/splunkd start.

0 Karma

MHibbin
Influencer

didn't spot think about that one? haha

0 Karma

MHibbin
Influencer

different user from last start-up?
anything in the splunk log files ($SPLUNK_HOME/var/log/splunk/)?
if it is a new installation tried re-downloading incase something got lost in transmission, or tried a different version as it's nix?

0 Karma
Get Updates on the Splunk Community!

Automatic Discovery Part 1: What is Automatic Discovery in Splunk Observability Cloud ...

If you’ve ever deployed a new database cluster, spun up a caching layer, or added a load balancer, you know it ...

Real-Time Fraud Detection: How Splunk Dashboards Protect Financial Institutions

Financial fraud isn't slowing down. If anything, it's getting more sophisticated. Account takeovers, credit ...

Splunk + ThousandEyes: Correlate frontend, app, and network data to troubleshoot ...

 Are you tired of troubleshooting delays caused by siloed frontend, application, and network data? We've got a ...