Getting Data In

Original splunk container fails to start (RHEL 7.6 + Docker 1.13.1-103) -- but works fine on CentOS 7

justunix
New Member

Loading a new and unmodified splunk container throws an error and cannot start on RHEL 7.6
The docker image has been pulled from docker.io using "docker pull splunk/splunk:latest"

This occurs on RHEL 7.6 with Docker 1.13.103 while on CentOS 7 with same Docker Version behaves differently.
The startup command ("docker run ..") is exactly the same:
a) On CentOS 7 the docker container starts silently, is up and running after about a minute.
It starts up successfully (log attached below - Section "B").
b) On RHEL 7.6 it fails after roughly 30 seconds (log see below - section "A").

A) Docker run on RHEL 7 (not successful):
$ docker run -d -p 12706:8000 -e 'SPLUNK_START_ARGS=--accept-license' -e 'SPLUNK_PASSWORD=Secret123' --name splunk splunk
a321fcc0a98b93057f16b5215a438251080e576ef8330e7acdcc75baadbd9535

$ docker logs splunk
PLAY [Run default Splunk provisioning]
Wednesday 16 October 2019 09:53:47 +0000 (0:00:00.042) 0:00:00.042
TASK [Gathering Facts]
ok: [localhost]
Wednesday 16 October 2019 09:53:50 +0000 (0:00:03.024) 0:00:03.066
Wednesday 16 October 2019 09:53:50 +0000 (0:00:00.044) 0:00:03.111
Wednesday 16 October 2019 09:53:50 +0000 (0:00:00.037) 0:00:03.148
Wednesday 16 October 2019 09:53:50 +0000 (0:00:00.150) 0:00:03.299
included: /opt/ansible/roles/splunk_common/tasks/get_facts.yml for localhost
Wednesday 16 October 2019 09:53:51 +0000 (0:00:00.081) 0:00:03.380
TASK [splunk_common : Set privilege escalation user]
ok: [localhost]
Wednesday 16 October 2019 09:53:51 +0000 (0:00:00.039) 0:00:03.420
TASK [splunk_common : Check for existing installation]
ok: [localhost]
Wednesday 16 October 2019 09:53:52 +0000 (0:00:01.081) 0:00:04.502
TASK [splunk_common : Set splunk install fact]
ok: [localhost]
Wednesday 16 October 2019 09:53:52 +0000 (0:00:00.043) 0:00:04.545
TASK [splunk_common : Check for existing splunk secret]
ok: [localhost]
Wednesday 16 October 2019 09:53:52 +0000 (0:00:00.148) 0:00:04.694
TASK [splunk_common : Set first run fact]
ok: [localhost]
Wednesday 16 October 2019 09:53:52 +0000 (0:00:00.043) 0:00:04.737
TASK [splunk_common : Check if we are in a docker]
ok: [localhost]
Wednesday 16 October 2019 09:53:53 +0000 (0:00:00.930) 0:00:05.668
TASK [splunk_common : Set docker fact]
ok: [localhost]
Wednesday 16 October 2019 09:53:53 +0000 (0:00:00.040) 0:00:05.708
included: /opt/ansible/roles/splunk_common/tasks/get_facts_build_type.yml for localhost
Wednesday 16 October 2019 09:53:53 +0000 (0:00:00.072) 0:00:05.781
Wednesday 16 October 2019 09:53:53 +0000 (0:00:00.037) 0:00:05.818
Wednesday 16 October 2019 09:53:53 +0000 (0:00:00.042) 0:00:05.861
Wednesday 16 October 2019 09:53:53 +0000 (0:00:00.045) 0:00:05.907
Wednesday 16 October 2019 09:53:53 +0000 (0:00:00.048) 0:00:05.955
Wednesday 16 October 2019 09:53:53 +0000 (0:00:00.043) 0:00:05.998
included: /opt/ansible/roles/splunk_common/tasks/get_facts_target_version.yml for localhost
Wednesday 16 October 2019 09:53:53 +0000 (0:00:00.076) 0:00:06.075
Wednesday 16 October 2019 09:53:53 +0000 (0:00:00.039) 0:00:06.115
Wednesday 16 October 2019 09:53:53 +0000 (0:00:00.038) 0:00:06.153
Wednesday 16 October 2019 09:53:53 +0000 (0:00:00.038) 0:00:06.191
TASK [splunk_common : Find manifests]
ok: [localhost]
Wednesday 16 October 2019 09:53:54 +0000 (0:00:00.341) 0:00:06.533
TASK [splunk_common : Set current version fact]
ok: [localhost]
Wednesday 16 October 2019 09:53:54 +0000 (0:00:00.044) 0:00:06.577
TASK [splunk_common : Setting upgrade fact]
ok: [localhost]
Wednesday 16 October 2019 09:53:54 +0000 (0:00:00.042) 0:00:06.620
included: /opt/ansible/roles/splunk_common/tasks/change_splunk_directory_owner.yml for localhost
Wednesday 16 October 2019 09:53:54 +0000 (0:00:00.082) 0:00:06.702
TASK [splunk_common : Update Splunk directory owner]
changed: [localhost]
Wednesday 16 October 2019 09:54:08 +0000 (0:00:13.950) 0:00:20.653
included: /opt/ansible/roles/splunk_common/tasks/update_etc.yml for localhost
Wednesday 16 October 2019 09:54:08 +0000 (0:00:00.089) 0:00:20.743
TASK [splunk_common : Check if /sbin/updateetc.sh exists]
ok: [localhost]
Wednesday 16 October 2019 09:54:09 +0000 (0:00:00.923) 0:00:21.666
TASK [splunk_common : Update /opt/splunk/etc]
changed: [localhost]
Wednesday 16 October 2019 09:54:10 +0000 (0:00:01.421) 0:00:23.088
Wednesday 16 October 2019 09:54:10 +0000 (0:00:00.036) 0:00:23.125
Wednesday 16 October 2019 09:54:10 +0000 (0:00:00.038) 0:00:23.163
Wednesday 16 October 2019 09:54:10 +0000 (0:00:00.039) 0:00:23.203
included: /opt/ansible/roles/splunk_common/tasks/remove_first_login.yml for localhost
Wednesday 16 October 2019 09:54:10 +0000 (0:00:00.080) 0:00:23.283
TASK [splunk_common : Create .ui_login]
changed: [localhost]
Wednesday 16 October 2019 09:54:11 +0000 (0:00:00.151) 0:00:23.434
Wednesday 16 October 2019 09:54:11 +0000 (0:00:00.039) 0:00:23.473
included: /opt/ansible/roles/splunk_common/tasks/set_splunk_secret.yml for localhost
Wednesday 16 October 2019 09:54:11 +0000 (0:00:00.105) 0:00:23.579
Wednesday 16 October 2019 09:54:11 +0000 (0:00:00.042) 0:00:23.621
included: /opt/ansible/roles/splunk_common/tasks/set_user_seed.yml for localhost
Wednesday 16 October 2019 09:54:11 +0000 (0:00:00.091) 0:00:23.712
TASK [splunk_common : Hash the password]
changed: [localhost]
Wednesday 16 October 2019 09:54:12 +0000 (0:00:00.989) 0:00:24.702
TASK [splunk_common : Generate user-seed.conf (Linux)]
changed: [localhost] => (item=USERNAME)
changed: [localhost] => (item=HASHED_PASSWORD)
Wednesday 16 October 2019 09:54:12 +0000 (0:00:00.443) 0:00:25.146
Wednesday 16 October 2019 09:54:12 +0000 (0:00:00.057) 0:00:25.203
included: /opt/ansible/roles/splunk_common/tasks/pre_splunk_start_commands.yml for localhost
Wednesday 16 October 2019 09:54:12 +0000 (0:00:00.091) 0:00:25.295
Wednesday 16 October 2019 09:54:12 +0000 (0:00:00.042) 0:00:25.337
included: /opt/ansible/roles/splunk_common/tasks/enable_s2s_port.yml for localhost
Wednesday 16 October 2019 09:54:13 +0000 (0:00:00.098) 0:00:25.435
TASK [splunk_common : Enable the Splunk-to-Splunk port]
fatal: [localhost]: FAILED! => {
"changed": false,
"cmd": [
"/opt/splunk/bin/splunk",
"enable",
"listen",
"9997",
"-auth",
"admin:blabla123",
"--accept-license",
"--answer-yes",
"--no-prompt"
],
"delta": "0:00:02.042621",
"end": "2019-10-16 09:54:15.238129",
"failed_when_result": true,
"rc": 2,
"start": "2019-10-16 09:54:13.195508"
}

STDOUT:

This appears to be your first time running this version of Splunk.

STDERR:

Copying '/opt/splunk/etc/openldap/ldap.conf.default' to '/opt/splunk/etc/openldap/ldap.conf'.
Generating RSA private key, 2048 bit long modulus
..........+++++
.............................................................+++++
e is 65537 (0x10001)
writing RSA key

Generating RSA private key, 2048 bit long modulus
.....................+++++
......................+++++
e is 65537 (0x10001)
writing RSA key

Moving '/opt/splunk/share/splunk/search_mrsparkle/modules.new' to '/opt/splunk/share/splunk/search_mrsparkle/modules'.

An unforeseen error occurred:

    Exception: <type 'exceptions.OSError'>, Value: [Errno 39] Directory not empty: '/opt/splunk/share/splunk/search_mrsparkle/modules.new/converters'

Traceback (most recent call last):
File "/opt/splunk/lib/python2.7/site-packages/splunk/clilib/cli.py", line 1149, in main
parseAndRun(argsList)
File "/opt/splunk/lib/python2.7/site-packages/splunk/clilib/cli.py", line 1004, in parseAndRun
retVal = cList.getCmd(command, subCmd).call(argList, fromCLI = True)
File "/opt/splunk/lib/python2.7/site-packages/splunk/clilib/cli.py", line 280, in call
return self.func(args, fromCLI)
File "/opt/splunk/lib/python2.7/site-packages/splunk/clilib/control_api.py", line 30, in wrapperFunc
return func(dictCopy, fromCLI)
File "/opt/splunk/lib/python2.7/site-packages/splunk/clilib/_internal.py", line 177, in firstTimeRun
comm.moveItem(migration.PATH_UI_MOD_NEW, migration.PATH_UI_MOD_ACTIVE)
File "/opt/splunk/lib/python2.7/site-packages/splunk/clilib/cli_common.py", line 1017, in moveItem
shutil.move(src, dst)
File "/opt/splunk/lib/python2.7/shutil.py", line 314, in move
rmtree(src)
File "/opt/splunk/lib/python2.7/shutil.py", line 261, in rmtree
rmtree(fullname, ignore_errors, onerror)
File "/opt/splunk/lib/python2.7/shutil.py", line 270, in rmtree
onerror(os.rmdir, path, sys.exc_info())
File "/opt/splunk/lib/python2.7/shutil.py", line 268, in rmtree
os.rmdir(path)
OSError: [Errno 39] Directory not empty: '/opt/splunk/share/splunk/search_mrsparkle/modules.new/converters'

Please file a case online at http://www.splunk.com/page/submit_issue

MSG:

non-zero return code

PLAY RECAP
localhost : ok=27 changed=5 unreachable=0 failed=1 skipped=17 rescued=0 ignored=0

Wednesday 16 October 2019 09:54:15 +0000 (0:00:02.191) 0:00:27.626

splunk_common : Update Splunk directory owner -------------------------- 13.95s
Gathering Facts --------------------------------------------------------- 3.02s
splunk_common : Enable the Splunk-to-Splunk port ------------------------ 2.19s
splunk_common : Update /opt/splunk/etc ---------------------------------- 1.42s
splunk_common : Check for existing installation ------------------------- 1.08s
splunk_common : Hash the password --------------------------------------- 0.99s
splunk_common : Check if we are in a docker ----------------------------- 0.93s
splunk_common : Check if /sbin/updateetc.sh exists ---------------------- 0.92s
splunk_common : Generate user-seed.conf (Linux) ------------------------- 0.44s
splunk_common : Find manifests ------------------------------------------ 0.34s
splunk_common : Create .ui_login ---------------------------------------- 0.15s
Provision role ---------------------------------------------------------- 0.15s
splunk_common : Check for existing splunk secret ------------------------ 0.15s
splunk_common : include_tasks ------------------------------------------- 0.11s
splunk_common : include_tasks ------------------------------------------- 0.10s
splunk_common : include_tasks ------------------------------------------- 0.09s
splunk_common : include_tasks ------------------------------------------- 0.09s
splunk_common : include_tasks ------------------------------------------- 0.09s
splunk_common : include_tasks ------------------------------------------- 0.08s
splunk_common : include_tasks ------------------------------------------- 0.08s
splunkd is not running.

B) Docker run on CentOS 7 (successful):
$ docker run -d -p 12706:8000 -e 'SPLUNK_START_ARGS=--accept-license' -e 'SPLUNK_PASSWORD=Secret123' --name splunk splunk
d4b05f1e16083e3f5c34e2b97e619125e305fb7f987feb65a8924b6663c4846e

$ docker ps
CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES
d4b05f1e1608 splunk "/sbin/entrypoint...." About a minute ago Up About a minute (healthy) 8065/tcp, 8088-8089/tcp, 8191/tcp, 9887/tcp, 9997/tcp, 0.0.0.0:12706->8000/tcp splunk

$ docker logs splunk
PLAY [Run default Splunk provisioning]
Wednesday 16 October 2019 09:36:43 +0000 (0:00:00.066) 0:00:00.066
TASK [Gathering Facts]
ok: [localhost]
Wednesday 16 October 2019 09:36:48 +0000 (0:00:04.238) 0:00:04.305
Wednesday 16 October 2019 09:36:48 +0000 (0:00:00.048) 0:00:04.353
Wednesday 16 October 2019 09:36:48 +0000 (0:00:00.036) 0:00:04.389
Wednesday 16 October 2019 09:36:48 +0000 (0:00:00.149) 0:00:04.538
included: /opt/ansible/roles/splunk_common/tasks/get_facts.yml for localhost
Wednesday 16 October 2019 09:36:48 +0000 (0:00:00.079) 0:00:04.618
TASK [splunk_common : Set privilege escalation user]
ok: [localhost]
Wednesday 16 October 2019 09:36:48 +0000 (0:00:00.038) 0:00:04.657
TASK [splunk_common : Check for existing installation]
ok: [localhost]
Wednesday 16 October 2019 09:36:49 +0000 (0:00:01.063) 0:00:05.720
TASK [splunk_common : Set splunk install fact]
ok: [localhost]
Wednesday 16 October 2019 09:36:49 +0000 (0:00:00.040) 0:00:05.760
TASK [splunk_common : Check for existing splunk secret]
ok: [localhost]
Wednesday 16 October 2019 09:36:49 +0000 (0:00:00.142) 0:00:05.903
TASK [splunk_common : Set first run fact]
ok: [localhost]
Wednesday 16 October 2019 09:36:49 +0000 (0:00:00.039) 0:00:05.942
TASK [splunk_common : Check if we are in a docker]
ok: [localhost]
Wednesday 16 October 2019 09:36:50 +0000 (0:00:00.869) 0:00:06.811
TASK [splunk_common : Set docker fact]
ok: [localhost]
Wednesday 16 October 2019 09:36:50 +0000 (0:00:00.040) 0:00:06.851
included: /opt/ansible/roles/splunk_common/tasks/get_facts_build_type.yml for localhost
Wednesday 16 October 2019 09:36:50 +0000 (0:00:00.066) 0:00:06.918
Wednesday 16 October 2019 09:36:50 +0000 (0:00:00.035) 0:00:06.954
Wednesday 16 October 2019 09:36:50 +0000 (0:00:00.040) 0:00:06.994
Wednesday 16 October 2019 09:36:50 +0000 (0:00:00.041) 0:00:07.036
Wednesday 16 October 2019 09:36:50 +0000 (0:00:00.041) 0:00:07.077
Wednesday 16 October 2019 09:36:50 +0000 (0:00:00.043) 0:00:07.121
included: /opt/ansible/roles/splunk_common/tasks/get_facts_target_version.yml for localhost
Wednesday 16 October 2019 09:36:50 +0000 (0:00:00.080) 0:00:07.202
Wednesday 16 October 2019 09:36:51 +0000 (0:00:00.037) 0:00:07.239
Wednesday 16 October 2019 09:36:51 +0000 (0:00:00.036) 0:00:07.276
Wednesday 16 October 2019 09:36:51 +0000 (0:00:00.037) 0:00:07.313
TASK [splunk_common : Find manifests]
ok: [localhost]
Wednesday 16 October 2019 09:36:51 +0000 (0:00:00.331) 0:00:07.645
TASK [splunk_common : Set current version fact]
ok: [localhost]
Wednesday 16 October 2019 09:36:51 +0000 (0:00:00.046) 0:00:07.691
TASK [splunk_common : Setting upgrade fact]
ok: [localhost]
Wednesday 16 October 2019 09:36:51 +0000 (0:00:00.045) 0:00:07.737
included: /opt/ansible/roles/splunk_common/tasks/change_splunk_directory_owner.yml for localhost
Wednesday 16 October 2019 09:36:51 +0000 (0:00:00.082) 0:00:07.819
TASK [splunk_common : Update Splunk directory owner]
ok: [localhost]
Wednesday 16 October 2019 09:36:53 +0000 (0:00:02.118) 0:00:09.937
included: /opt/ansible/roles/splunk_common/tasks/update_etc.yml for localhost
Wednesday 16 October 2019 09:36:53 +0000 (0:00:00.086) 0:00:10.024
TASK [splunk_common : Check if /sbin/updateetc.sh exists]
ok: [localhost]
Wednesday 16 October 2019 09:36:54 +0000 (0:00:00.837) 0:00:10.862
TASK [splunk_common : Update /opt/splunk/etc]
changed: [localhost]
Wednesday 16 October 2019 09:36:58 +0000 (0:00:03.376) 0:00:14.238
Wednesday 16 October 2019 09:36:58 +0000 (0:00:00.051) 0:00:14.290
Wednesday 16 October 2019 09:36:58 +0000 (0:00:00.039) 0:00:14.329
Wednesday 16 October 2019 09:36:58 +0000 (0:00:00.040) 0:00:14.370
included: /opt/ansible/roles/splunk_common/tasks/remove_first_login.yml for localhost
Wednesday 16 October 2019 09:36:58 +0000 (0:00:00.078) 0:00:14.449
TASK [splunk_common : Create .ui_login]
changed: [localhost]
Wednesday 16 October 2019 09:36:58 +0000 (0:00:00.213) 0:00:14.663
Wednesday 16 October 2019 09:36:58 +0000 (0:00:00.035) 0:00:14.699
included: /opt/ansible/roles/splunk_common/tasks/set_splunk_secret.yml for localhost
Wednesday 16 October 2019 09:36:58 +0000 (0:00:00.080) 0:00:14.779
Wednesday 16 October 2019 09:36:58 +0000 (0:00:00.038) 0:00:14.818
included: /opt/ansible/roles/splunk_common/tasks/set_user_seed.yml for localhost
Wednesday 16 October 2019 09:36:58 +0000 (0:00:00.143) 0:00:14.962
TASK [splunk_common : Hash the password]
changed: [localhost]
Wednesday 16 October 2019 09:37:00 +0000 (0:00:01.423) 0:00:16.385
TASK [splunk_common : Generate user-seed.conf (Linux)]
changed: [localhost] => (item=USERNAME)
changed: [localhost] => (item=HASHED_PASSWORD)
Wednesday 16 October 2019 09:37:00 +0000 (0:00:00.496) 0:00:16.882
Wednesday 16 October 2019 09:37:00 +0000 (0:00:00.056) 0:00:16.939
included: /opt/ansible/roles/splunk_common/tasks/pre_splunk_start_commands.yml for localhost
Wednesday 16 October 2019 09:37:00 +0000 (0:00:00.084) 0:00:17.023
Wednesday 16 October 2019 09:37:00 +0000 (0:00:00.039) 0:00:17.063
included: /opt/ansible/roles/splunk_common/tasks/enable_s2s_port.yml for localhost
Wednesday 16 October 2019 09:37:00 +0000 (0:00:00.090) 0:00:17.153
TASK [splunk_common : Enable the Splunk-to-Splunk port]
changed: [localhost]
Wednesday 16 October 2019 09:37:07 +0000 (0:00:06.776) 0:00:23.930
Wednesday 16 October 2019 09:37:07 +0000 (0:00:00.041) 0:00:23.972
Wednesday 16 October 2019 09:37:07 +0000 (0:00:00.045) 0:00:24.017
Wednesday 16 October 2019 09:37:07 +0000 (0:00:00.044) 0:00:24.062
Wednesday 16 October 2019 09:37:07 +0000 (0:00:00.045) 0:00:24.107
Wednesday 16 October 2019 09:37:07 +0000 (0:00:00.039) 0:00:24.147
included: /opt/ansible/roles/splunk_common/tasks/start_splunk.yml for localhost
Wednesday 16 October 2019 09:37:08 +0000 (0:00:00.096) 0:00:24.243
TASK [splunk_common : Get Splunk status]
ok: [localhost]
Wednesday 16 October 2019 09:37:09 +0000 (0:00:01.360) 0:00:25.603
TASK [splunk_common : Start Splunk via cli]
changed: [localhost]
Wednesday 16 October 2019 09:37:19 +0000 (0:00:10.177) 0:00:35.781
Wednesday 16 October 2019 09:37:19 +0000 (0:00:00.061) 0:00:35.842
Wednesday 16 October 2019 09:37:19 +0000 (0:00:00.110) 0:00:35.953
TASK [splunk_common : Wait for splunkd management port]
ok: [localhost]
Wednesday 16 October 2019 09:37:20 +0000 (0:00:00.397) 0:00:36.351
included: /opt/ansible/roles/splunk_common/tasks/set_certificate_prefix.yml for localhost
Wednesday 16 October 2019 09:37:20 +0000 (0:00:00.093) 0:00:36.444
TASK [splunk_common : Test basic https endpoint]
ok: [localhost]
Wednesday 16 October 2019 09:37:20 +0000 (0:00:00.702) 0:00:37.146
TASK [splunk_common : Set url prefix for future REST calls]
ok: [localhost]
Wednesday 16 October 2019 09:37:20 +0000 (0:00:00.047) 0:00:37.194
Wednesday 16 October 2019 09:37:21 +0000 (0:00:00.047) 0:00:37.242
included: /opt/ansible/roles/splunk_common/tasks/clean_user_seed.yml for localhost
Wednesday 16 October 2019 09:37:21 +0000 (0:00:00.098) 0:00:37.340
TASK [splunk_common : Remove user-seed.conf]
ok: [localhost]
Wednesday 16 October 2019 09:37:21 +0000 (0:00:00.162) 0:00:37.502
included: /opt/ansible/roles/splunk_common/tasks/add_splunk_license.yml for localhost
Wednesday 16 October 2019 09:37:21 +0000 (0:00:00.120) 0:00:37.623
Wednesday 16 October 2019 09:37:21 +0000 (0:00:00.049) 0:00:37.672
TASK [splunk_common : Apply Splunk license]
fatal: [localhost]: FAILED! => {}

MSG:

No file was found when using first_found. Use the 'skip: true' option to allow this task to be skipped if no files are found

...ignoring
Wednesday 16 October 2019 09:37:21 +0000 (0:00:00.046) 0:00:37.719
Wednesday 16 October 2019 09:37:21 +0000 (0:00:00.038) 0:00:37.757
Wednesday 16 October 2019 09:37:21 +0000 (0:00:00.041) 0:00:37.799
Wednesday 16 October 2019 09:37:21 +0000 (0:00:00.049) 0:00:37.849
Wednesday 16 October 2019 09:37:21 +0000 (0:00:00.040) 0:00:37.890
Wednesday 16 October 2019 09:37:21 +0000 (0:00:00.043) 0:00:37.934
Wednesday 16 October 2019 09:37:21 +0000 (0:00:00.052) 0:00:37.986
Wednesday 16 October 2019 09:37:21 +0000 (0:00:00.052) 0:00:38.039
included: /opt/ansible/roles/splunk_standalone/tasks/../../splunk_common/tasks/check_for_required_restarts.yml for localhost
Wednesday 16 October 2019 09:37:21 +0000 (0:00:00.099) 0:00:38.139
TASK [splunk_standalone : Check for required restarts]
ok: [localhost]
Wednesday 16 October 2019 09:37:22 +0000 (0:00:00.406) 0:00:38.545
Wednesday 16 October 2019 09:37:22 +0000 (0:00:00.043) 0:00:38.589
included: /opt/ansible/roles/splunk_common/tasks/check_for_required_restarts.yml for localhost
Wednesday 16 October 2019 09:37:22 +0000 (0:00:00.077) 0:00:38.666
TASK [Check for required restarts]
ok: [localhost]
PLAY RECAP
localhost : ok=43 changed=6 unreachable=0 failed=0 skipped=34 rescued=0 ignored=1

Wednesday 16 October 2019 09:37:22 +0000 (0:00:00.274) 0:00:38.940

splunk_common : Start Splunk via cli ----------------------------------- 10.18s
splunk_common : Enable the Splunk-to-Splunk port ------------------------ 6.78s
Gathering Facts --------------------------------------------------------- 4.24s
splunk_common : Update /opt/splunk/etc ---------------------------------- 3.38s
splunk_common : Update Splunk directory owner --------------------------- 2.12s
splunk_common : Hash the password --------------------------------------- 1.42s
splunk_common : Get Splunk status --------------------------------------- 1.36s
splunk_common : Check for existing installation ------------------------- 1.06s
splunk_common : Check if we are in a docker ----------------------------- 0.87s
splunk_common : Check if /sbin/updateetc.sh exists ---------------------- 0.84s
splunk_common : Test basic https endpoint ------------------------------- 0.70s
splunk_common : Generate user-seed.conf (Linux) ------------------------- 0.50s
splunk_standalone : Check for required restarts ------------------------- 0.41s
splunk_common : Wait for splunkd management port ------------------------ 0.40s
splunk_common : Find manifests ------------------------------------------ 0.33s
Check for required restarts --------------------------------------------- 0.27s
splunk_common : Create .ui_login ---------------------------------------- 0.21s
splunk_common : Remove user-seed.conf ----------------------------------- 0.16s
Provision role ---------------------------------------------------------- 0.15s

splunk_common : include_tasks ------------------------------------------- 0.14s

Ansible playbook complete, will begin streaming var/log/splunk/splunkd_stderr.log

0 Karma
Get Updates on the Splunk Community!

What’s New in Splunk App for PCI Compliance 5.3.1?

The Splunk App for PCI Compliance allows customers to extend the power of their existing Splunk solution with ...

Extending Observability Content to Splunk Cloud

Register to join us !   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to ...

What's new in Splunk Cloud Platform 9.1.2312?

Hi Splunky people! We are excited to share the newest updates in Splunk Cloud Platform 9.1.2312! Analysts can ...