am having the same problems. can anyone here help pls. Am not able to do anything for days as i want to practice with the dataset. Attached is the screenshot. Thanks in advance. This is my number i really need urgent assistance. Been searching everywhere on youtube bot no way. ... View more

You'll need to fix the filesystem on which the botsv3 index is stored.  Perhaps it's in read-only mode or maybe the permissions on the botsv3 directory are incorrect. ... View more

ok am gonna try this and revert. Thanks  ... View more

Hi @Lorenzo1, try to manually restart your Master Node and if the issue continues open a case to Splunk Support, preparing a diag of the Master Node. Ciao. Giuseppe ... View more

am having same problem running splunk WEB on my second and third indexers as i wanted to go and configure their listening ports however, the first indexer is connecting to the web without any problems. I didn't experience this yesterday   ... View more

so i had this problem and after so much wasting of my time trying to find the problem, it turned out that my management port 8089 was not enabled on the "Security Group" that i was using and the moment i added that port everything worked like magic. And i was able to go to sleep. Lol 😂 ... View more

Thanxx ... View more

so i found only splunkd.pib in my mac splunk folder but i couldn't move it to a temp directory so i moved it to trash. and even though the ./splunk status command couldn't run bcos it says "no such directory found"; it still worked. i was able to restart my Splunk Enterprise. Thanks guys. ... View more

am using a mac. Pls how do i access $SPLUNK_HOME/var/run directory? Thanxx ... View more