Hello all, sometimes when I start splunk I get following message: Splunk has detected an unclean shutdown. Recovery should be attempted in order to ensure accurate search results, but this may take a while. If you choose 'No' here, you will have the option to recover again upon restarting Splunk, however that recovery may take significantly longer. Perform faster recovery now? [Y/n] Is it possible to start Splunk from command line with out selecting "Perform faster recovery now? [Y/n]". I would like to automatically select Yes option when unclean shutdown is reported. Thank you and kind regards, Marko ... View more

Hello all, I have problem with starting Splunk 4.2 as user "splunk" on Solaris 11 express. Starting Splunk with root permissions is working OK. When running Splunk with splunk user I get following error: ld.so.1: splunkd: fatal: libpcre.so.0: open failed: No such file or directory Splunk> See your world. Maybe wish you hadn't. Checking prerequisites... Checking mgmt port [8089]: open Checking configuration... Done. Checking index directory... ld.so.1: splunkd: fatal: libpcre.so.0: open failed: No such file or directory ERROR: pid 7945 terminated with signal 9 Do you know how to fix this error? Thank you in advance and kind regards, Marko:) Some additional info: Follwoing command were issued: rolemod -K defaultpriv=basic,net_privaddr,proc_exec,proc_fork splunk chown -R splunk:splunk /opt/splunk ls -ls /opt/splunk/lib .... 1 lrwxrwxrwx 1 root root 16 Mar 21 20:24 libpcre.so -> libpcre.so.0.0.1 1 lrwxrwxrwx 1 root root 16 Mar 21 20:24 libpcre.so.0 -> libpcre.so.0.0.1 204 -r-xr-xr-x 1 splunk splunk 189036 Mar 11 12:38 libpcre.so.0.0.1 1 lrwxrwxrwx 1 root root 19 Mar 21 20:24 libsqlite3.so -> libsqlite3.so.0.8.6 .... ... View more