Splunk Search

Why is Splunk Service not starting with 'authDb' error?

New Member

Hi - any idea why my Splunk service is failing with this error?

What is 'authDb'?

~]# service splunk start
Starting Splunk...

Splunk> CSI: Logfiles.

Checking prerequisites...
Checking http port [8000]: open
Checking mgmt port [8089]: open
Checking appserver port []: open
Checking kvstore port [8191]: open
Checking configuration... Done.
Creating: /mnt/splunk_hot//authDb
Warning: cannot create "/mnt/splunk_hot//authDb"

Tags (1)
0 Karma


It would seem Splunk does not have permissions to write. Confirm the user Splunk runs as has ownership of the installation and that there are no storage issues.

chown -R splunk:splunk /mnt/*

Get Updates on the Splunk Community!

Splunk Observability Cloud | Customer Survey!

If you use Splunk Observability Cloud, we invite you to share your valuable insights with us through a brief ...

.conf23 | Get Your Cybersecurity Defense Analyst Certification in Vegas

We’re excited to announce a new Splunk certification exam being released at .conf23! If you’re going to Las ...

Starting With Observability: OpenTelemetry Best Practices

Tech Talk Starting With Observability: OpenTelemetry Best Practices Tuesday, October 17, 2023   |  11AM PST / ...