Thank you both.  systemctl start splunk.service 👆 it worked for me ... View more

It could be helpful: I stopped splunk, then I ran the following again: # /opt/splunk/bin/splunk enable boot-start -systemd-managed 1 -user splunk Systemd unit file installed at /etc/systemd/system/Splunkd.service. Configured as systemd managed service. # /opt/splunk/bin/splunk start Splunk> Take the sh out of IT. Checking prerequisites... Checking http port [8000]: open Checking mgmt port [8089]: open Checking appserver port [127.0.0.1:8065]: open Checking kvstore port [8191]: open Checking configuration... Done. Checking critical directories... Done Checking indexes... Validated: _audit _configtracker _internal _introspection _metrics _metrics_rollup _telemetry _thefishbucket history main summary Done Checking filesystem compatibility... Done Checking conf files for problems... Done Checking default conf files for edits... Validating installed files against hashes from '/opt/splunk/splunk-9.0.1-82c987350fde-linux-2.6-x86_64-manifest' All installed files intact. Done All preliminary checks passed. Starting splunk server daemon (splunkd)... Done [ OK ] # systemctl status splunkd.service Unit splunkd.service could not be found. 🙄🤔 ... View more

Thank you. Yes, It worked, but I am still on the same page. I need Splunk to start automatically when the machine boots. I ran /opt/splunk/bin/splunk enable boot-start -systemd-managed 1 -user splunk, but nothing has changed yet. ... View more

Thanks, Richgalloway for your reply. I did the modifications you mentioned.  After all, I went to start splunk, but I faced the following error:  Error opening username mapping file: /opt/splunk/etc/users/users.ini err: Cannot open file=/opt/splunk/etc/users/users.ini for parsing: Permission denied Cannot initialize: /opt/splunk/etc/apps/splunk_assist/metadata/local.meta: Permission denied Cannot initialize: /opt/splunk/etc/apps/splunk_instrumentation/metadata/local.meta: Permission denied Cannot initialize: /opt/splunk/etc/system/metadata/local.meta: Permission denied Cannot initialize: /opt/splunk/etc/apps/learned/metadata/local.meta: Permission denied Error opening username mapping file: /opt/splunk/etc/users/users.ini err: Cannot open file=/opt/splunk/etc/users/users.ini for parsing: Permission denied Cannot initialize: /opt/splunk/etc/apps/splunk_assist/metadata/local.meta: Permission denied Cannot initialize: /opt/splunk/etc/apps/splunk_instrumentation/metadata/local.meta: Permission denied Cannot initialize: /opt/splunk/etc/system/metadata/local.meta: Permission denied Cannot initialize: /opt/splunk/etc/apps/learned/metadata/local.meta: Permission denied Error opening username mapping file: /opt/splunk/etc/users/users.ini err: Cannot open file=/opt/splunk/etc/users/users.ini for parsing: Permission denied Cannot initialize: /opt/splunk/etc/apps/splunk_assist/metadata/local.meta: Permission denied Cannot initialize: /opt/splunk/etc/apps/splunk_instrumentation/metadata/local.meta: Permission denied Cannot initialize: /opt/splunk/etc/system/metadata/local.meta: Permission denied Cannot initialize: /opt/splunk/etc/apps/learned/metadata/local.meta: Permission denied Error opening username mapping file: /opt/splunk/etc/users/users.ini err: Cannot open file=/opt/splunk/etc/users/users.ini for parsing: Permission denied Cannot initialize: /opt/splunk/etc/apps/splunk_assist/metadata/local.meta: Permission denied Cannot initialize: /opt/splunk/etc/apps/splunk_instrumentation/metadata/local.meta: Permission denied Cannot initialize: /opt/splunk/etc/system/metadata/local.meta: Permission denied Cannot initialize: /opt/splunk/etc/apps/learned/metadata/local.meta: Permission denied Error opening username mapping file: /opt/splunk/etc/users/users.ini err: Cannot open file=/opt/splunk/etc/users/users.ini for parsing: Permission denied Cannot initialize: /opt/splunk/etc/apps/splunk_assist/metadata/local.meta: Permission denied Cannot initialize: /opt/splunk/etc/apps/splunk_instrumentation/metadata/local.meta: Permission denied Cannot initialize: /opt/splunk/etc/system/metadata/local.meta: Permission denied Cannot initialize: /opt/splunk/etc/apps/learned/metadata/local.meta: Permission denied Traceback (most recent call last): File "/opt/splunk/lib/python3.7/site-packages/splunk/clilib/cli.py", line 38, in <module> import splunk.auth as auth File "/opt/splunk/lib/python3.7/site-packages/splunk/auth.py", line 9, in <module> import splunk.entity as en File "/opt/splunk/lib/python3.7/site-packages/splunk/entity.py", line 12, in <module> import splunk.rest as rest File "/opt/splunk/lib/python3.7/site-packages/splunk/rest/__init__.py", line 32, in <module> import splunk.ssl_context File "/opt/splunk/lib/python3.7/site-packages/splunk/ssl_context.py", line 35, in <module> import splunk.mining.dcutils as dcu File "/opt/splunk/lib/python3.7/site-packages/splunk/mining/dcutils.py", line 84, in <module> pythonLogHandler = logging.handlers.RotatingFileHandler(filename=os.path.join(os.environ['SPLUNK_HOME'], 'var', 'log', 'splunk', 'python.log'), mode='a', maxBytes=scannedMaxBytes, backupCount=scannedMaxBackupIndex) File "/opt/splunk/lib/python3.7/logging/handlers.py", line 148, in __init__ BaseRotatingHandler.__init__(self, filename, mode, encoding, delay) File "/opt/splunk/lib/python3.7/logging/handlers.py", line 55, in __init__ logging.FileHandler.__init__(self, filename, mode, encoding, delay) File "/opt/splunk/lib/python3.7/logging/__init__.py", line 1087, in __init__ StreamHandler.__init__(self, self._open()) File "/opt/splunk/lib/python3.7/logging/__init__.py", line 1116, in _open return open(self.baseFilename, self.mode, encoding=self.encoding) PermissionError: [Errno 13] Permission denied: '/opt/splunk/var/log/splunk/python.log' Error running pre-start tasks   Do you have any suggestions?  ... View more