Issue after upgrade from HF splunk 9.2.1 to 9.2.2.
OS Running on Redhat 8.10 latest kernel version
Tried to change give permissions to splunk folder.
Tried to set to permissive mode the sestatus.
[afmpcc-prabdev@sgmtihfsv001 splunk]$ sudo -u splunk /mnt/splunk/splunk/bin/splunk start --accept-license --answer-yes
Error calling execve(): Permission denied
Error launching systemctl show command: Permission denied
This appears to be an upgrade of Splunk.
--------------------------------------------------------------------------------)
Splunk has detected an older version of Splunk installed on this machine. To
finish upgrading to the new version, Splunk's installer will automatically
update and alter your current configuration files. Deprecated configuration
files will be renamed with a.deprecated extension.
You can choose to preview the changes that will be made to your configuration
files before proceeding with the migration and upgrade:
If you want to migrate and upgrade without previewing the changes that will be
made to your existing configuration files, choose 'y'.
If you want to see what changes will be made before you proceed with the
upgrade, choose 'n'.
Perform migration and upgrade without previewing configuration changes? [y/n] y
Can't run "btool server list clustering --no-log": Permission denied
[afmpcc-prabdev@sgmtihfsv001 splunk]$[afmpcc-prabdev@sgmtihfsv001 splunk]$ sudo -u splunk /mnt/splunk/splunk/bin/splunk btool server list clustering --no-log
execve: Permission denied
while running command /mnt/splunk/splunk/bin/btool
[afmpcc-prabdev@sgmtihfsv001 splunk]$
Thank you guys. Issue was resolved. There is NOEXEC restriction configured on the account in SUDOERS file.
hi @Xander13 ,
good for you, see next time!
Ciao and happy splunking
Giuseppe
P.S.: Karma Points are appreciated by all the contributors 😉
Hi @Xander13 ,
you're using the splunk user to run the upgrade and probably there are some files owned by root.
You have two choices:
Ciao.
Giuseppe
Hi @Xander13
the error - Error calling execve(): Permission denied
was discussed in this post. could you pls check this once, thanks.