Splunk Search

Network file permission error (-5000) when starting Splunk enterprise

mikeah21
Explorer

Recently installed Enterprise 60d trial from the Splunk website download on OS X and first, and subsequent startup instance this error message appears. Splunk doesn't start up. This is outputted from AppleScript, from the error message:

set SCRIPT_NAME to "osxManageSplunk.sh"
set SPLUNK_ICON to path to resource "splunk_icon.icns"

Single line file, populated by postinstall script, required: no newline.

set SPLUNK_HOME_FILE to path to resource "SPLUNK_HOME.path"

# Read SPLUNK_HOME value from above file.
open for access SPLUNK_HOME_FILE
set SPLUNK_HOME to (read SPLUNK_HOME_FILE)
close access SPLUNK_HOME_FILE

`# Get path as /foo/bar instead of Foo:Bar. God I hate you,

AppleScript. I don't understand you, but I do know I hate you.`

set SCRIPT_PATH to POSIX path of (path to resource SCRIPT_NAME)

`# Run startup shell script and pass in SPLUNK_HOME path. And as

always, quote it. /bin/sh Macintosh HD doesn't work so well.`

do shell script "\"" & SCRIPT_PATH & "\" \"" & SPLUNK_HOME & "\" \"" & SPLUNK_ICON & "\""

What needs to change to get Splunk to start?

EDIT - the hash'ed lines are showing as big bold lines. so, edited them with backtics key.

Tags (1)

inventsekar
SplunkTrust
SplunkTrust

EDIT - the hash'ed lines are showing as big bold lines. so, edited them with backtics key.

0 Karma

mikeah21
Explorer

The output looks pretty now yet no solution to the problem.

0 Karma

mikeah21
Explorer

Running OS X 10.14 which doesn't look like it's supported on Splunk download. When will support for this version be available, and how is Splunk uninstalled completely from a Mac?

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Quick connection discovery mode for forwarders

When a Splunk forwarder loses connectivity to its indexers, it does not always reconnect immediately. In many ...

Build and Launch AI Agents from Your Splunk Workflows

  Register We’ve all been there: juggling alerts, runbooks, and endless manual searches. What if you could ...

Splunk Cloud Application Management in Terraform

Register   On Tuesday, August 4 at 11AM PDT / 2PM EDT, we’re diving into how you can bring Infrastructure as ...