×

Join the Conversation

Without signing in, you're just watching from the sidelines. Sign in or Register to connect, share, and be part of the Splunk Community.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Ask a Question
gpalau
New Member
Member since: ‎04-17-2025
‎04-17-2025
Community Statistics
Posts 2
Solutions 0
Karma Given 0
Karma Received 0
Member Since ‎04-17-2025
View All

Re: Splunk Forwarder 9.4.1: Warning: cannot create...

by in Installation
‎04-17-2025 08:50 AM
‎04-17-2025 08:50 AM
I went ahead and re-installed the Splunk Forwarder manually, and on the last step of the .pkg install it reads: Click the "Splunk" icon on the Desktop to start and connect to Splunk. To start Splunk manually, open a Terminal window and run the command: 
$ /Applications/Splunk/bin/splunk start Documentation: http://docs.splunk.com/Documentation/Splunk However the installation path is /Applications/Splunk Forwarder/bin Then you have to manually run a command line to approve the license?   ... View more

Splunk Forwarder 9.4.1: Warning: cannot create "/A...

by in Installation
‎04-17-2025 08:38 AM
‎04-17-2025 08:38 AM
I installed Splunk Forwarder 9.4.1 on macOS 15.4 and on first run I get a bunch of permission errors: Warning: cannot create "/Applications/SplunkForwarder/var/log/splunk Warning: cannot create "/Applications/SplunkForwarder/var/log/introspection" Warning: cannot create "/Applications/SplunkForwarder/var/log/watchdog" Warning: cannot create "/Applications/SplunkForwarder/var/log/client_events" This appears to be your first time running this version of Splunk. Could not open log file "/Applications/SplunkForwarder/var/log/splunk/first_install.log" for writing (2).   However these folders have the right permissions. A bit lost as to what to do here.  ... View more
Labels
Contact Me
Online Status
Offline
Date Last Visited
‎04-17-2025 08:29 AM