Splunk Enterprise

Unable to start Splunkd

wildbill4
Path Finder

Getting the following when I try to start splunkd:

"/opt/splunk/bin/splunkd Error while loading shared libraries: lib.so.0.9.8: Cannot open shared object file: No such file or directory"

As far as I know nothing has been changed on the box since installation. I know the file exist at /opt/splunk/lib/lib.so.0.9.8. Any assistance is greatly appreciated.

Tags (1)
1 Solution

sdaniels
Splunk Employee
Splunk Employee

If you are trying to start splunk it should be like this /opt/splunk/bin/splunk start, and not the splunkd process. Just want to make sure you are starting it up properly. I've seen this before. Docs below.

http://docs.splunk.com/Documentation/Splunk/latest/Installation/Startsplunkforthefirsttime

View solution in original post

wildbill4
Path Finder

Same user used to start up. I don't see anything in the log files. Should I be looking at one specifically? Has been install for 4 or 5 months. Thanks for the help

0 Karma

sdaniels
Splunk Employee
Splunk Employee

If you are trying to start splunk it should be like this /opt/splunk/bin/splunk start, and not the splunkd process. Just want to make sure you are starting it up properly. I've seen this before. Docs below.

http://docs.splunk.com/Documentation/Splunk/latest/Installation/Startsplunkforthefirsttime

wildbill4
Path Finder

I started it with the /opt/splunk/bin/splunk start the first time. Then noticed that splunkd hadn't started and then did the /opt/splunk/bin/splunkd start.

0 Karma

MHibbin
Influencer

didn't spot think about that one? haha

0 Karma

MHibbin
Influencer

different user from last start-up?
anything in the splunk log files ($SPLUNK_HOME/var/log/splunk/)?
if it is a new installation tried re-downloading incase something got lost in transmission, or tried a different version as it's nix?

0 Karma
Get Updates on the Splunk Community!

Accelerating Observability as Code with the Splunk AI Assistant

We’ve seen in previous posts what Observability as Code (OaC) is and how it’s now essential for managing ...

Integrating Splunk Search API and Quarto to Create Reproducible Investigation ...

 Splunk is More Than Just the Web Console For Digital Forensics and Incident Response (DFIR) practitioners, ...

Congratulations to the 2025-2026 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...