At present, this can be worked around to run as root using command: sudo $SPLUNK_HOME/bin/splunk start --accept-licence --run-as-root Which is noted in the error, along with this is being deprecated soon requiring non-root user to run services. Better practice is running as Splunk user with limited permissions as @inventsekar did get to; which is documented here (10.2 docs). The shorthand command noted in answer of sudo -i -u splunk $SPLUNK_HOME/bin/splunk start --accept-license starts Splunk within the OS Splunk user context for one-time operation, rather than trying to run as the root user.  Going a step further boot-start can be enabled within the OS Splunk user context also: sudo $SPLUNK_HOME/bin/splunk enable boot-start -user splunk Reference here (10.2 docs) . ... View more