Splunk Search

Splunk uninstallation / kill command failed -- Connection Refused error on port 22

sancharigupta
New Member

Hi,

I was trying to uninstall Splunk due to some issues in existing installation. I followed the steps for "Uninstall Splunk Enterprise manually" as mentioned on below link:
https://docs.splunk.com/Documentation/Splunk/7.0.0/Installation/UninstallSplunk

But as soon as I executed the below command (as directed on above link), the next moment, I got Connection Refused error port 22 for the server. I don't know how is this related, any hint will be really helpful.

kill -9 ps -ef | grep splunk | grep -v grep | awk '{print $2;}'

Thanks in advance

0 Karma

jfraiberg
Communicator

Can you run the ps -ef command without the awk and kill command and list the output for us?

0 Karma

sancharigupta
New Member

hi, I am unable to login to the server using ssh now (as I am getting Connection refused error on port 22 after running the Kill command). So unfortunately wont be able to give the output.

0 Karma

s2_splunk
Splunk Employee
Splunk Employee

Are you by any chance SSH'ed in as a user that has 'splunk' in the user name and hence are killing your own SSH session?

0 Karma

sancharigupta
New Member

HI, That's a great question. But I was logged in as Root that time, do you think it might cause this issue?

0 Karma

lfedak_splunk
Splunk Employee
Splunk Employee

Hey @sancharigupta, can you let us know what version of Splunk you were using and more about your environment? That might help people diagnose further. Thanks!

0 Karma

sancharigupta
New Member

Hi, it was Splunk Enterprise version 6.6.3.

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

[Puzzles] Solve, Learn, Repeat: Matching cron expressions

This puzzle (first published here) is based on matching timestamps to cron expressions.All the timestamps ...

Why Splunk Customers Should Attend Cisco Live 2026 Las Vegas

Why Splunk Customers Should Attend Cisco Live 2026 Las Vegas     Cisco Live 2026 is almost here, and this ...

Data Management Digest – May 2026

Welcome to the May 2026 edition of Data Management Digest!   As your trusted partner in data innovation, the ...