splunk is listening after checking commands: COMMAND PID USER FD TYPE DEVICE SIZE/OFF NODE NAME splunkd 153622 splunk 188u IPv4 649151 0t0 TCP *:8000 (LISTEN) logs file has a lot of errors: very often periodic in the end beginning where it switches to the other picture ... View more

Splunk is listening: COMMAND PID USER FD TYPE DEVICE SIZE/OFF NODE NAME splunkd 153622 splunk 188u IPv4 649151 0t0 TCP *:8000 (LISTEN)   its basicly just a repeating of this:   02-25-2026 09:25:24.417 +0100 ERROR pipeline [99266 indexerPipe] - Uncaught exception in pipeline execution (indexer) - getting next event 02-25-2026 09:25:24.417 +0100 ERROR HotDBManager [99266 indexerPipe] - Unable to create directory /opt/splunk/var/lib/splunk/audit/db/hot_v1_353 because No such file or directory 02-25-2026 09:25:24.417 +0100 ERROR HotDBManager [99266 indexerPipe] - Unable to create directory /opt/splunk/var/lib/splunk/audit/db/hot_v1_353 because No such file or directory 02-25-2026 09:25:24.417 +0100 ERROR pipeline [99266 indexerPipe] - Runtime exception in pipeline=indexerPipe processor=indexer error='Unable to create directory /opt/splunk/var/lib/splunk/audit/db/hot_v1_353 because No such file or directory' confkey='source::audittrail|host::DIS-LOG-CYO101|audittrail|' 02-25-2026 09:25:24.705 +0100 INFO DatabaseDirectoryManager [99244 IndexerService] - idx=_configtracker writing a bucket manifest in hotWarmPath='/opt/splunk/var/lib/splunk/_configtracker/db' pendingBucketUpdates=1 innerLockTime=0.000. Reason='IndexerService periodic manifest update' 02-25-2026 09:25:24.705 +0100 ERROR SearchResultsWriter [99244 IndexerService] - Unable to open output file: path=/opt/splunk/var/lib/splunk/_configtracker/db/.bucketManifest99103_147151435_tmp error=No such file or directory   ... View more