Splunk Search

Splunk uninstallation / kill command failed -- Connection Refused error on port 22

sancharigupta
New Member

Hi,

I was trying to uninstall Splunk due to some issues in existing installation. I followed the steps for "Uninstall Splunk Enterprise manually" as mentioned on below link:
https://docs.splunk.com/Documentation/Splunk/7.0.0/Installation/UninstallSplunk

But as soon as I executed the below command (as directed on above link), the next moment, I got Connection Refused error port 22 for the server. I don't know how is this related, any hint will be really helpful.

kill -9 ps -ef | grep splunk | grep -v grep | awk '{print $2;}'

Thanks in advance

0 Karma

jfraiberg
Communicator

Can you run the ps -ef command without the awk and kill command and list the output for us?

0 Karma

sancharigupta
New Member

hi, I am unable to login to the server using ssh now (as I am getting Connection refused error on port 22 after running the Kill command). So unfortunately wont be able to give the output.

0 Karma

s2_splunk
Splunk Employee
Splunk Employee

Are you by any chance SSH'ed in as a user that has 'splunk' in the user name and hence are killing your own SSH session?

0 Karma

sancharigupta
New Member

HI, That's a great question. But I was logged in as Root that time, do you think it might cause this issue?

0 Karma

lfedak_splunk
Splunk Employee
Splunk Employee

Hey @sancharigupta, can you let us know what version of Splunk you were using and more about your environment? That might help people diagnose further. Thanks!

0 Karma

sancharigupta
New Member

Hi, it was Splunk Enterprise version 6.6.3.

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Free Professional Services for .conf26 Attendees

This year at .conf26, we are doing something a little different. We are bringing the best minds from ...

Defend at Machine Speed: Your Guide to Security Sessions at .conf26

Splunk .conf26   With threats moving at machine speed and attack surfaces expanding across hybrid ...

Where Innovation Takes Flight: The Splunk4Aviation Flight Sim Lands at .conf26

If you hear someone at .conf26 shouting "gear down, GEAR DOWN" across the show floor, you have found us.  The ...