Getting Data In

SSL Error installing Splunk Forwarder

vikas_sood
Explorer

Hi,

I am trying to setup latest version Splunk Forwarder first time on a linux server. However, after exeuting below command, I am geeting errors. Please suggest what could be the issue here?

 

/splunk/splunkforwarder/bin> ./splunk start --accept-license

 

This appears to be your first time running this version of Splunk.

 

Splunk software must create an administrator account during startup. Otherwise, you cannot log in.
Create credentials for the administrator account.
Characters do not appear on the screen when you type in credentials.

 

Please enter an administrator username: administrator
Password must contain at least:
   * 8 total printable ASCII character(s).
Please enter a new password:
Please confirm new password:

Splunk> Like an F-18, bro.

Checking prerequisites...
        Checking mgmt port [8089]: open
                Creating: /splunk/splunkforwarder/var/lib/splunk
                Creating: /splunk/splunkforwarder/var/run/splunk
                Creating: /splunk/splunkforwarder/var/run/splunk/appserver/i18n
                Creating: /splunk/splunkforwarder/var/run/splunk/appserver/modules/static/css
                Creating: /splunk/splunkforwarder/var/run/splunk/upload
                Creating: /splunk/splunkforwarder/var/spool/splunk
                Creating: /splunk/splunkforwarder/var/spool/dirmoncache
                Creating: /splunk/splunkforwarder/var/lib/splunk/authDb
                Creating: /splunk/splunkforwarder/var/lib/splunk/hashDb
ERROR: pid 27238 terminated with signal 11
SSL certificate generation failed.

 

 

Reffering to this link: https://splunkcommunities.force.com/customers/apex/ArticleDetailPage?URLName=Splunk-Won-t-Start-ERRO...

Resolution is ::
The main reason of this issue/error is because of an app of the Operating System (OS) named CylancePROTECT, it won’t let Splunk to create the certificates, so Splunk won’t be able to startCustomer will be able to start up Splunk after disabling Cylance.

 

Is there a way around this that we dont have to disable the security software?

Labels (1)
Tags (1)
0 Karma
.conf21 Now Fully Virtual!
Register for FREE Today!

We've made .conf21 totally virtual and totally FREE! Our completely online experience will run from 10/19 through 10/20 with some additional events, too!