Splunk Search

Network file permission error (-5000) when starting Splunk enterprise

mikeah21
Explorer

Recently installed Enterprise 60d trial from the Splunk website download on OS X and first, and subsequent startup instance this error message appears. Splunk doesn't start up. This is outputted from AppleScript, from the error message:

set SCRIPT_NAME to "osxManageSplunk.sh"
set SPLUNK_ICON to path to resource "splunk_icon.icns"

Single line file, populated by postinstall script, required: no newline.

set SPLUNK_HOME_FILE to path to resource "SPLUNK_HOME.path"

# Read SPLUNK_HOME value from above file.
open for access SPLUNK_HOME_FILE
set SPLUNK_HOME to (read SPLUNK_HOME_FILE)
close access SPLUNK_HOME_FILE

`# Get path as /foo/bar instead of Foo:Bar. God I hate you,

AppleScript. I don't understand you, but I do know I hate you.`

set SCRIPT_PATH to POSIX path of (path to resource SCRIPT_NAME)

`# Run startup shell script and pass in SPLUNK_HOME path. And as

always, quote it. /bin/sh Macintosh HD doesn't work so well.`

do shell script "\"" & SCRIPT_PATH & "\" \"" & SPLUNK_HOME & "\" \"" & SPLUNK_ICON & "\""

What needs to change to get Splunk to start?

EDIT - the hash'ed lines are showing as big bold lines. so, edited them with backtics key.

Tags (1)

inventsekar
SplunkTrust
SplunkTrust

EDIT - the hash'ed lines are showing as big bold lines. so, edited them with backtics key.

0 Karma

mikeah21
Explorer

The output looks pretty now yet no solution to the problem.

0 Karma

mikeah21
Explorer

Running OS X 10.14 which doesn't look like it's supported on Splunk download. When will support for this version be available, and how is Splunk uninstalled completely from a Mac?

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

From Data to Insight: Announcing the Winners of the Splunk Dashboard Contest

Hi Splunkers, First off, thank you to everyone who participated in our very first From Data to Insight: The ...

Splunk Developers: Construct Your Future at the .conf26 Builder Bar

Calling all Splunk architects, platform admins, and app developers: the site is open, and the blueprints are ...

Quick connection discovery mode for forwarders

When a Splunk forwarder loses connectivity to its indexers, it does not always reconnect immediately. In many ...