Splunk Search

SPLUNK BOOT

dani9
Explorer

The value of env var SPLUNK_OS_USER, "splunk", does not match any user on this system;
Error: Success

This command can only be run by bootstart user.

WHAT I NEED TO RESOLVE IT?

Tags (1)
0 Karma

ivanreis
Builder

When splunk is installed, a user should be created to run splunkd service. By default installation the user is "splunk", so in order to fix the issue, please create a user "splunk" in your environment.
On linux run:
useradd splunk
groupadd splunk

chown -R splunk:splunk $SPLUNK_HOME

Check this document for further information -> https://docs.splunk.com/Documentation/Splunk/8.0.0/Installation/RunSplunkasadifferentornon-rootuser

0 Karma
Get Updates on the Splunk Community!

Detecting Brute Force Account Takeover Fraud with Splunk

This article is the second in a three-part series exploring advanced fraud detection techniques using Splunk. ...

Buttercup Games: Further Dashboarding Techniques (Part 9)

This series of blogs assumes you have already completed the Splunk Enterprise Search Tutorial as it uses the ...

Buttercup Games: Further Dashboarding Techniques (Part 8)

This series of blogs assumes you have already completed the Splunk Enterprise Search Tutorial as it uses the ...