Upgrading to VERSION=8.0.4.1 I'm getting this error running as ROOT!!
Migrating to:
VERSION=8.0.4.1
BUILD=ab7a85abaa98
PRODUCT=splunk
PLATFORM=Linux-x86_64
Copying '/opt/splunk/etc/myinstall/splunkd.xml' to '/opt/splunk/etc/myinstall/splunkd.xml-migrate.bak'.
Checking saved search compatibility...
Handling deprecated files...
Checking script configuration...
An unforeseen error occurred:
Exception: <class 'PermissionError'>, Value: [Errno 13] Permission denied: '/opt/splunk/etc/system/local/inputs.conf.tmp'
Traceback (most recent call last):
File "/opt/splunk/lib/python3.7/site-packages/splunk/clilib/cli.py", line 1353, in <module>
sys.exit(main(sys.argv))
File "/opt/splunk/lib/python3.7/site-packages/splunk/clilib/cli.py", line 1206, in main
parseAndRun(argsList)
File "/opt/splunk/lib/python3.7/site-packages/splunk/clilib/cli.py", line 1061, in parseAndRun
retVal = cList.getCmd(command, subCmd).call(argList, fromCLI = True)
File "/opt/splunk/lib/python3.7/site-packages/splunk/clilib/cli.py", line 293, in call
return self.func(args, fromCLI)
File "/opt/splunk/lib/python3.7/site-packages/splunk/clilib/control_api.py", line 30, in wrapperFunc
return func(dictCopy, fromCLI)
File "/opt/splunk/lib/python3.7/site-packages/splunk/clilib/_internal.py", line 189, in firstTimeRun
migration.autoMigrate(args[ARG_LOGFILE], isDryRun)
File "/opt/splunk/lib/python3.7/site-packages/splunk/clilib/migration.py", line 3094, in autoMigrate
migInputs_3_3_0(migInputsConf, dryRun)
File "/opt/splunk/lib/python3.7/site-packages/splunk/clilib/migration.py", line 1682, in migInputs_3_3_0
comm.sed(policySearch, policyReplace, path, inPlace = True)
File "/opt/splunk/lib/python3.7/site-packages/splunk/clilib/cli_common.py", line 1232, in sed
outFile = open(tmpPath, 'w')
PermissionError: [Errno 13] Permission denied: '/opt/splunk/etc/system/local/inputs.conf.tmp'
Please file a case online at http://www.splunk.com/page/submit_issue
Error running pre-start tasks
Root is how I always run the upgrade process yet never have run into this issue before!
I had the same problem going doing an upgrade from 8.2.4 to 8..5
I went to the directory where the permission error was shown at the end of the Traceback like this
f = open(path, 'w')
PermissionError: [Errno 13] Permission denied: '/opt/splunk/etc/system/local/indexes.conf'
Some of the files where read only so I did a chmod 660 * and that fixed it.
I had this same problem when upgrading Splunk.
After untaring the TGZ file to my $SPLUNK_HOME.
cd $SPLUNK_ROOT_DIR
ls -lah
This confirmed the owner of the folder changed to 10777
I went ahead and ran this line to fix permissions
chown -R splunk:splunk $SPLUNK_HOME
In your case change the user to root.
Hope that helps.
This also worked for me.
Upgrade from 9.0.4 to 9.1.1
This also worked for me.
Upgrade from 9.0.4 to 9.2.1
Thanks panguy, this is exactly what I needed!
1. Is Splunk offline?
2. Who owns the processes?