Splunk Search

Splunk uninstallation / kill command failed -- Connection Refused error on port 22

sancharigupta
New Member

Hi,

I was trying to uninstall Splunk due to some issues in existing installation. I followed the steps for "Uninstall Splunk Enterprise manually" as mentioned on below link:
https://docs.splunk.com/Documentation/Splunk/7.0.0/Installation/UninstallSplunk

But as soon as I executed the below command (as directed on above link), the next moment, I got Connection Refused error port 22 for the server. I don't know how is this related, any hint will be really helpful.

kill -9 ps -ef | grep splunk | grep -v grep | awk '{print $2;}'

Thanks in advance

0 Karma

jfraiberg
Communicator

Can you run the ps -ef command without the awk and kill command and list the output for us?

0 Karma

sancharigupta
New Member

hi, I am unable to login to the server using ssh now (as I am getting Connection refused error on port 22 after running the Kill command). So unfortunately wont be able to give the output.

0 Karma

s2_splunk
Splunk Employee
Splunk Employee

Are you by any chance SSH'ed in as a user that has 'splunk' in the user name and hence are killing your own SSH session?

0 Karma

sancharigupta
New Member

HI, That's a great question. But I was logged in as Root that time, do you think it might cause this issue?

0 Karma

lfedak_splunk
Splunk Employee
Splunk Employee

Hey @sancharigupta, can you let us know what version of Splunk you were using and more about your environment? That might help people diagnose further. Thanks!

0 Karma

sancharigupta
New Member

Hi, it was Splunk Enterprise version 6.6.3.

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Forwarder Topology Guidance: Intermediate HF vs Intermediate UF

Why Universal Forwarders Should Not Be Used as Intermediate Forwarders A practical Splunk forwarding topology ...

At .conf26, Don’t Just See What’s Next. Help Shape It at Innovation Labs.

Long before a new capability reaches the keynote stage, it begins as an idea waiting to be tested. At ...

Data Management Digest – August 2026

Data Management Digest   Welcome to the August 2026 edition of Data Management Digest! August was a big month ...