Hi richgalloway, thanks for your reply,
splunkd.log only shows warnings, nothing about why Splunk won't start (06-24-2015 Splunk stops working)
06-24-2015 22:02:53.515 -0300 WARN SearchResults - /home/nuevo_splunk/splunk/etc/apps/SA-EndpointProtection/lookups/services_tracker.csv is empty, multi-line header is missing matching quotation, or could not parse CSV header
06-24-2015 22:02:53.515 -0300 WARN SearchResults - /home/nuevo_splunk/splunk/etc/apps/SA-EndpointProtection/lookups/system_version_tracker.csv is empty, multi-line header is missing matching quotation, or could not parse CSV header
06-24-2015 22:02:53.515 -0300 WARN SearchResults - /home/nuevo_splunk/splunk/etc/apps/SA-EndpointProtection/lookups/update_signature_reference.csv is empty, multi-line header is missing matching quotation, or could not parse CSV header
06-24-2015 22:02:53.515 -0300 WARN SearchResults - /home/nuevo_splunk/splunk/etc/apps/SA-EndpointProtection/lookups/useraccounts_tracker.csv is empty, multi-line header is missing matching quotation, or could not parse CSV header
06-24-2015 22:02:53.551 -0300 WARN SearchResults - /home/nuevo_splunk/splunk/etc/apps/SA-NetworkProtection/lookups/ids_category_tracker2.csv is empty, multi-line header is missing matching quotation, or could not parse CSV header
06-24-2015 22:02:53.554 -0300 WARN SearchResults - /home/nuevo_splunk/splunk/etc/apps/SA-NetworkProtection/lookups/vuln_signature_reference2.csv is empty, multi-line header is missing matching quotation, or could not parse CSV header
06-24-2015 22:02:53.584 -0300 WARN TransformsExtractionHandler - Unable to find stanza=cim_cloud_domains.csv in lookups.conf, cannot enumerate fields list
06-24-2015 22:02:53.584 -0300 WARN TransformsExtractionHandler - Unable to find stanza=cim_corporate_email_domains.csv in lookups.conf, cannot enumerate fields list
06-24-2015 22:02:53.584 -0300 WARN TransformsExtractionHandler - Unable to find stanza=cim_corporate_web_domains.csv in lookups.conf, cannot enumerate fields list
06-24-2015 22:02:53.584 -0300 WARN TransformsExtractionHandler - Unable to find stanza=cim_dns_reply_codes.csv in lookups.conf, cannot enumerate fields list
06-24-2015 22:02:53.584 -0300 WARN TransformsExtractionHandler - Unable to find stanza=cim_email_protocols.csv in lookups.conf, cannot enumerate fields list
06-24-2015 22:02:53.858 -0300 WARN TransformsExtractionHandler - Unable to find stanza=guid_lookup.csv in lookups.conf, cannot enumerate fields list
06-24-2015 22:02:53.858 -0300 WARN TransformsExtractionHandler - Unable to find stanza=sid_lookup.csv in lookups.conf, cannot enumerate fields list
06-24-2015 22:07:55.814 -0300 WARN SearchResults - /home/nuevo_splunk/splunk/etc/apps/DA-ESS-NetworkProtection/lookups/whois_tracker.csv is empty, multi-line header is missing matching quotation, or could not parse CSV header
06-24-2015 22:07:56.006 -0300 WARN SearchResults - /home/nuevo_splunk/splunk/etc/apps/SA-EndpointProtection/lookups/listeningports_tracker.csv is empty, multi-line header is missing matching quotation, or could not parse CSV header
06-24-2015 22:07:56.007 -0300 WARN SearchResults - /home/nuevo_splunk/splunk/etc/apps/SA-EndpointProtection/lookups/localprocesses_tracker.csv is empty, multi-line header is missing matching quotation, or could not parse CSV header
06-24-2015 22:07:56.007 -0300 WARN SearchResults - /home/nuevo_splunk/splunk/etc/apps/SA-EndpointProtection/lookups/malware_operations_tracker.csv is empty, multi-line header is missing matching quotation, or could not parse CSV header
06-24-2015 22:07:56.007 -0300 WARN SearchResults - /home/nuevo_splunk/splunk/etc/apps/SA-EndpointProtection/lookups/malware_tracker2.csv is empty, multi-line header is missing matching quotation, or could not parse CSV header
06-24-2015 22:07:56.046 -0300 WARN SearchResults - /home/nuevo_splunk/splunk/etc/apps/SA-EndpointProtection/lookups/services_tracker.csv is empty, multi-line header is missing matching quotation, or could not parse CSV header
06-24-2015 22:07:56.046 -0300 WARN SearchResults - /home/nuevo_splunk/splunk/etc/apps/SA-EndpointProtection/lookups/system_version_tracker.csv is empty, multi-line header is missing matching quotation, or could not parse CSV header
06-24-2015 22:07:56.046 -0300 WARN SearchResults - /home/nuevo_splunk/splunk/etc/apps/SA-EndpointProtection/lookups/update_signature_reference.csv is empty, multi-line header is missing matching quotation, or could not parse CSV header
06-24-2015 22:07:56.047 -0300 WARN SearchResults - /home/nuevo_splunk/splunk/etc/apps/SA-EndpointProtection/lookups/useraccounts_tracker.csv is empty, multi-line header is missing matching quotation, or could not parse CSV header
06-24-2015 22:07:56.305 -0300 WARN SearchResults - /home/nuevo_splunk/splunk/etc/apps/SA-NetworkProtection/lookups/ids_category_tracker2.csv is empty, multi-line header is missing matching quotation, or could not parse CSV header
06-24-2015 22:07:56.359 -0300 WARN SearchResults - /home/nuevo_splunk/splunk/etc/apps/SA-NetworkProtection/lookups/vuln_signature_reference2.csv is empty, multi-line header is missing matching quotation, or could not parse CSV header
06-24-2015 22:07:56.618 -0300 WARN TransformsExtractionHandler - Unable to find stanza=cim_cloud_domains.csv in lookups.conf, cannot enumerate fields list
06-24-2015 22:07:56.618 -0300 WARN TransformsExtractionHandler - Unable to find stanza=cim_corporate_email_domains.csv in lookups.conf, cannot enumerate fields list
06-24-2015 22:07:56.618 -0300 WARN TransformsExtractionHandler - Unable to find stanza=cim_corporate_web_domains.csv in lookups.conf, cannot enumerate fields list
06-24-2015 22:07:56.618 -0300 WARN TransformsExtractionHandler - Unable to find stanza=cim_dns_reply_codes.csv in lookups.conf, cannot enumerate fields list
06-24-2015 22:07:56.618 -0300 WARN TransformsExtractionHandler - Unable to find stanza=cim_email_protocols.csv in lookups.conf, cannot enumerate fields list
06-24-2015 22:07:57.134 -0300 WARN TransformsExtractionHandler - Unable to find stanza=guid_lookup.csv in lookups.conf, cannot enumerate fields list
06-24-2015 22:07:57.135 -0300 WARN TransformsExtractionHandler - Unable to find stanza=sid_lookup.csv in lookups.conf, cannot enumerate fields list
06-24-2015 22:08:00.079 -0300 WARN SearchResults - /home/nuevo_splunk/splunk/etc/apps/DA-ESS-NetworkProtection/lookups/whois_tracker.csv is empty, multi-line header is missing matching quotation, or could not parse CSV header
06-24-2015 22:08:00.103 -0300 WARN SearchResults - /home/nuevo_splunk/splunk/etc/apps/SA-EndpointProtection/lookups/listeningports_tracker.csv is empty, multi-line header is missing matching quotation, or could not parse CSV header
06-24-2015 22:08:00.103 -0300 WARN SearchResults - /home/nuevo_splunk/splunk/etc/apps/SA-EndpointProtection/lookups/localprocesses_tracker.csv is empty, multi-line header is missing matching quotation, or could not parse CSV header
06-24-2015 22:08:00.103 -0300 WARN SearchResults - /home/nuevo_splunk/splunk/etc/apps/SA-EndpointProtection/lookups/malware_operations_tracker.csv is empty, multi-line header is missing matching quotation, or could not parse CSV header
06-24-2015 22:08:00.103 -0300 WARN SearchResults - /home/nuevo_splunk/splunk/etc/apps/SA-EndpointProtection/lookups/malware_tracker2.csv is empty, multi-line header is missing matching quotation, or could not parse CSV header
06-24-2015 22:08:00.104 -0300 WARN SearchResults - /home/nuevo_splunk/splunk/etc/apps/SA-EndpointProtection/lookups/services_tracker.csv is empty, multi-line header is missing matching quotation, or could not parse CSV header
06-24-2015 22:08:00.104 -0300 WARN SearchResults - /home/nuevo_splunk/splunk/etc/apps/SA-EndpointProtection/lookups/system_version_tracker.csv is empty, multi-line header is missing matching quotation, or could not parse CSV header
06-24-2015 22:08:00.104 -0300 WARN SearchResults - /home/nuevo_splunk/splunk/etc/apps/SA-EndpointProtection/lookups/update_signature_reference.csv is empty, multi-line header is missing matching quotation, or could not parse CSV header
06-24-2015 22:08:00.104 -0300 WARN SearchResults - /home/nuevo_splunk/splunk/etc/apps/SA-EndpointProtection/lookups/useraccounts_tracker.csv is empty, multi-line header is missing matching quotation, or could not parse CSV header
06-24-2015 22:08:00.117 -0300 WARN SearchResults - /home/nuevo_splunk/splunk/etc/apps/SA-NetworkProtection/lookups/ids_category_tracker2.csv is empty, multi-line header is missing matching quotation, or could not parse CSV header
06-24-2015 22:08:00.117 -0300 WARN SearchResults - /home/nuevo_splunk/splunk/etc/apps/SA-NetworkProtection/lookups/vuln_signature_reference2.csv is empty, multi-line header is missing matching quotation, or could not parse CSV header
06-24-2015 22:08:00.136 -0300 WARN TransformsExtractionHandler - Unable to find stanza=cim_cloud_domains.csv in lookups.conf, cannot enumerate fields list
06-24-2015 22:08:00.136 -0300 WARN TransformsExtractionHandler - Unable to find stanza=cim_corporate_email_domains.csv in lookups.conf, cannot enumerate fields list
06-24-2015 22:08:00.136 -0300 WARN TransformsExtractionHandler - Unable to find stanza=cim_corporate_web_domains.csv in lookups.conf, cannot enumerate fields list
06-24-2015 22:08:00.137 -0300 WARN TransformsExtractionHandler - Unable to find stanza=cim_dns_reply_codes.csv in lookups.conf, cannot enumerate fields list
06-24-2015 22:08:00.137 -0300 WARN TransformsExtractionHandler - Unable to find stanza=cim_email_protocols.csv in lookups.conf, cannot enumerate fields list
06-24-2015 22:08:00.514 -0300 WARN TransformsExtractionHandler - Unable to find stanza=guid_lookup.csv in lookups.conf, cannot enumerate fields list
06-24-2015 22:08:00.514 -0300 WARN TransformsExtractionHandler - Unable to find stanza=sid_lookup.csv in lookups.conf, cannot enumerate fields list
... View more