Hello , I configured splunk to start at boot time , i checked the permissions and the script all looks good to me , But when i am rebooting the server , Splunk is not starting up automatically. here is my init.d script #!/bin/sh # # /etc/init.d/splunk # init script for Splunk. # generated by 'splunk enable boot-start'. # # chkconfig: 2345 90 60 # description: Splunk indexer service # RETVAL=0 USER=splunk . /etc/init.d/functions splunk_start() { echo Starting Splunk... su - ${USER} -c '"$SPLUNK_HOME/bin/splunk" start --no-prompt --answer-yes' RETVAL=$? [ $RETVAL -eq 0 ] && touch /var/lock/subsys/splunk } splunk_stop() { echo Stopping Splunk... su - ${USER} -c '"$SPLUNK_HOME/bin/splunk" stop' RETVAL=$? [ $RETVAL -eq 0 ] && rm -f /var/lock/subsys/splunk } splunk_restart() { echo Restarting Splunk... su - ${USER} -c '"$SPLUNK_HOME/bin/splunk" restart' RETVAL=$? [ $RETVAL -eq 0 ] && touch /var/lock/subsys/splunk } splunk_status() { echo Splunk status: su - ${USER} -c '"$SPLUNK_HOME/bin/splunk" status' RETVAL=$? } case "$1" in start) splunk_start ;; stop) splunk_stop ;; restart) splunk_restart ;; status) splunk_status ;; *) echo "Usage: $0 {start|stop|restart|status}" exit 1 ;; esac exit $RETVAL   Once the VM is up after reboot , When i check manually the status of splunk it says its not running and getting below messages  splunkd 6519 was not running. Stopping splunk helpers... [ OK ] Done. Stopped helpers. Removing stale pid file... done. splunkd is not running. ... View more

Hello , I have a question regarding migration. Currently we are using 4 search heads tith a search head deployer which we used to deploy any apps to the search head cluster. Our deployer is on CentOS 7 vm. We have another VM is ready which is RHEL 7 and have different IP address and DNS. I have to move the splunk deployer from CentOS 7 to new RHEL 7 server. My plan is to break the current search head cluster. And reconfigure the search head cluster again which will point to the new deployer. We have some apps in the old deployer shcluster/apps location , if i copy that entire directory or the entire splunk directory and paste it to the new VM and start the splunk in it then rebuild the SHC which will point to this new vm  ? Will their will be any problem for doing so ? Will the existing apps on the SHC will be over written ?? If their is an issue for doing so please let me know the best way to acheive this ?? ... View more

Hello All , We have a splunk server running on CentOS 6 and other server running on RHEL 6 ,  We are planning to upgrade the OS of CentOS from 6 to 7 and RHEL 6 to 7 , IS their will be anything to do with splunk like i need to stop the service during upgrade. Except this is their anything to do ? Or is it will be create any Impact to Splunk ? Should be dere any OS flavour compatibility needs to check before upgrade ? ... View more

HI All , I have a question regarding python , I have python installed on my servers and i want to delete the python from the server , is it will impact anything on splunk ? BEcause i heard splunk software ships with python libarary and its not using the one we have installed on server , its using its own libarary , IS it true ???? ... View more

Hi , Currently i am running splunk version 7.3.3.  Its running on RHEL 6.10 with Python 2.7 in OS level. I got a notice to upgrade the Python verison to 3.6. I saw and read somewhere that splunk has its own python library. So my question is if i upgrade the Python version of my OS to 3.6 , Will it break my splunk infrastructure which is running on 7.3.3. ?? ... View more