Splunk Search

Splunk uninstallation / kill command failed -- Connection Refused error on port 22

sancharigupta
New Member

Hi,

I was trying to uninstall Splunk due to some issues in existing installation. I followed the steps for "Uninstall Splunk Enterprise manually" as mentioned on below link:
https://docs.splunk.com/Documentation/Splunk/7.0.0/Installation/UninstallSplunk

But as soon as I executed the below command (as directed on above link), the next moment, I got Connection Refused error port 22 for the server. I don't know how is this related, any hint will be really helpful.

kill -9 ps -ef | grep splunk | grep -v grep | awk '{print $2;}'

Thanks in advance

0 Karma

jfraiberg
Communicator

Can you run the ps -ef command without the awk and kill command and list the output for us?

0 Karma

sancharigupta
New Member

hi, I am unable to login to the server using ssh now (as I am getting Connection refused error on port 22 after running the Kill command). So unfortunately wont be able to give the output.

0 Karma

s2_splunk
Splunk Employee
Splunk Employee

Are you by any chance SSH'ed in as a user that has 'splunk' in the user name and hence are killing your own SSH session?

0 Karma

sancharigupta
New Member

HI, That's a great question. But I was logged in as Root that time, do you think it might cause this issue?

0 Karma

lfedak_splunk
Splunk Employee
Splunk Employee

Hey @sancharigupta, can you let us know what version of Splunk you were using and more about your environment? That might help people diagnose further. Thanks!

0 Karma

sancharigupta
New Member

Hi, it was Splunk Enterprise version 6.6.3.

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Cisco Data Fabric from Architecture to Investigation, Better SOC Visibility, and More ...

Splunk Lantern is Splunk’s customer success center that provides practical guidance from Splunk experts on key ...

The Trust Gap: Why a Data Foundation is Fundamental to an Agentic Enterprise

The Trust Gap: Why a data foundation is fundamental to an  Agentic Enterprise.   Agentic AI is transforming ...

Data Management Digest – September 2026

    Welcome to the September 2026 edition of Data Management Digest! September brought a fresh wave of ...