Getting Data In

SSL Error installing Splunk Forwarder

vikas_sood
Explorer

Hi,

I am trying to setup latest version Splunk Forwarder first time on a linux server. However, after exeuting below command, I am geeting errors. Please suggest what could be the issue here?

 

/splunk/splunkforwarder/bin> ./splunk start --accept-license

 

This appears to be your first time running this version of Splunk.

 

Splunk software must create an administrator account during startup. Otherwise, you cannot log in.
Create credentials for the administrator account.
Characters do not appear on the screen when you type in credentials.

 

Please enter an administrator username: administrator
Password must contain at least:
   * 8 total printable ASCII character(s).
Please enter a new password:
Please confirm new password:

Splunk> Like an F-18, bro.

Checking prerequisites...
        Checking mgmt port [8089]: open
                Creating: /splunk/splunkforwarder/var/lib/splunk
                Creating: /splunk/splunkforwarder/var/run/splunk
                Creating: /splunk/splunkforwarder/var/run/splunk/appserver/i18n
                Creating: /splunk/splunkforwarder/var/run/splunk/appserver/modules/static/css
                Creating: /splunk/splunkforwarder/var/run/splunk/upload
                Creating: /splunk/splunkforwarder/var/spool/splunk
                Creating: /splunk/splunkforwarder/var/spool/dirmoncache
                Creating: /splunk/splunkforwarder/var/lib/splunk/authDb
                Creating: /splunk/splunkforwarder/var/lib/splunk/hashDb
ERROR: pid 27238 terminated with signal 11
SSL certificate generation failed.

 

 

Reffering to this link: https://splunkcommunities.force.com/customers/apex/ArticleDetailPage?URLName=Splunk-Won-t-Start-ERRO...

Resolution is ::
The main reason of this issue/error is because of an app of the Operating System (OS) named CylancePROTECT, it won’t let Splunk to create the certificates, so Splunk won’t be able to startCustomer will be able to start up Splunk after disabling Cylance.

 

Is there a way around this that we dont have to disable the security software?

Labels (1)
Tags (1)
0 Karma
Get Updates on the Splunk Community!

.conf24 | Registration Open!

Hello, hello! I come bearing good news: Registration for .conf24 is now open!   conf is Splunk’s rad annual ...

Splunk is officially part of Cisco

Revolutionizing how our customers build resilience across their entire digital footprint.   Splunk ...

Splunk APM & RUM | Planned Maintenance March 26 - March 28, 2024

There will be planned maintenance for Splunk APM and RUM between March 26, 2024 and March 28, 2024 as ...