hi @Kenny_splunk , I agree with @PickleRick , you should try to describe what you did to try to understand what happend. Anyway, probably the issue is in the moved folders. But if you deleted the ...
See more...
hi @Kenny_splunk , I agree with @PickleRick , you should try to describe what you did to try to understand what happend. Anyway, probably the issue is in the moved folders. But if you deleted the installation, it's very difficoult to recover the installation, unless you can restore a backup. Maybe (and I say maybe) Splunk Support can help you. Anyway, to tra a last chance, you could try to move the indexes from the now position to a new safe one and then create a new fresh installation that should run. Then you could stop Splunk and copy the saved indexes folders to the new position of $SPLUNK_DB (by default $SPLUNK_HOME/var/log/splunk), or change the value of $SPLUNK_DB pointing to the new position of indexes. Then, at least, you should create all the stanzas of your indexes in one indexes.conf using exactly the same names of your indexes. In this way it should run, let us know if you solved. Ciao. Giuseppe