Hi @aasraoui, at first don't add a new question to an existing (and solved!) on because probably none will answer you! Anyway, let me understand: you have a Splunk installation with folders and files owned by splunk (maybe check if all the files are owned by splunk), you runned rpm or tar command to update files, you access to your system with splunk user, you runned the splunkstart command, you receive permission denied, is it correct? At first, maybe check if all the files are owned by splunk and eventually give splunk ownership to all the files (maybe you modified something as root!). Then what user did you used to run the update? Try with root. What is the operative system? Ciao. Giuseppe
... View more