Ciao Gcusello ,  Yes, I reviewed these links however these steps did not work on Oracle linux 6.x. On google I found below steps which I followed & worked on Oracle 6.x. Let me know in case anything I am missing here however this worked for my system.   ----steps----- 1. Create a symbolic link to init.d: Link the Splunk init script to the /etc/init.d/ directory. sudo ln -s /opt/splunkforwarder/bin/splunk /etc/init.d/splunk 2.Configure Splunk to start at boot using chkconfig: Enable the Splunk service to start on boot. sudo chkconfig splunk on 3.Verify the setting. sudo chkconfig --list splunk You should see an output similar to: splunk 0:off 1:off 2:on 3:on 4:on 5:on 6:off 4. Manually restart the Splunk service ... View more

Hi Team, I am facing the same issue where i have performed splunk forwarder upgrade, while restarting i am getting below msg. Could anyone provide me a solution here, this is prod indexer server which is also playing the role of deployment server.  error: splunkd is not running. Splunk> CSI: Logfiles. Checking prerequisites... Checking mgmt port [8089]: not available ERROR: mgmt port [8089] - port is already bound. Splunk needs to use this port. Would you like to change ports? [y/n]: n Exiting....     ... View more