Splunk Search

Unable to stat the splunk indexer missing: /app/splunk/openssl directory

Mayanakhan
Explorer

Hi,

We are unable to start the our one of the indexer in cluster getting the below error. Can we copy the directory "/app/splunk/openssl" from any other indexer in cluster and start? is that fine or we need to follow ant other approach?

Cannot start; missing essential directory: /app/splunk/openssl
        Checking critical directories...Validating databases (splunkd validatedb) failed with code '11'.  If you cannot resolve the issue(s) above after consulting documentation, please file a case online at http://www.splunk.com/page/submit_issue
0 Karma
1 Solution

harsmarvania57
SplunkTrust
SplunkTrust

Hi,

Yes, you can copy it from other Splunk Enterprise Instance but make sure that you copy it from same version of Splunk Enterprise instance.

After copying directory make sure that permissions are also correct.

View solution in original post

harsmarvania57
SplunkTrust
SplunkTrust

Hi,

Yes, you can copy it from other Splunk Enterprise Instance but make sure that you copy it from same version of Splunk Enterprise instance.

After copying directory make sure that permissions are also correct.

Get Updates on the Splunk Community!

Registration for Splunk University is Now Open!

Are you ready for an adventure in learning?   Brace yourselves because Splunk University is back, and it's ...

Splunkbase | Splunk Dashboard Examples App for SimpleXML End of Life

The Splunk Dashboard Examples App for SimpleXML will reach end of support on Dec 19, 2024, after which no new ...

Understanding Generative AI Techniques and Their Application in Cybersecurity

Watch On-Demand Artificial intelligence is the talk of the town nowadays, with industries of all kinds ...