Installation

Why couldn't I send SIGTERM to pid 5632: Operation not permitted?

adityapavan18
Contributor

I am getting following error while i am trying to start the splunk forwarder process.
Can anyone please help me??

Labels (1)
Tags (1)
1 Solution

adityapavan18
Contributor

Thanks seems to have resolved it after i deleted the splunk.pid file from var/run folder inside splunk.

View solution in original post

koshyk
Super Champion

Agree, the answer is removing .pid file, but for easy copy and paste on Linux machines
ensure you are "splunk" user

SPLUNK_HOME="/opt/splunk"
rm $SPLUNK_HOME/var/run/splunk/splunkd.pid
$SPLUNK_HOME/bin/splunk status
$SPLUNK_HOME/bin/splunk start

edavson
Engager

pretty much what adityapavan18 said above but...

i moved the file '//var/run/splunk/splunkd.pid' to '//var/run/splunk/splunkd.pid.old' then ran '//bin/splunk start'. I guess you can delete the .old file after that.

the new splunkd.pid is created after start is complete

DataOrg
Builder

we can remove or we can rename or we can move to other location the splunk.pid file.
while starting splunkd it will check for the old splunk.pid file if its not there it will create new one and splunkd will be started

0 Karma

adityapavan18
Contributor

Thanks seems to have resolved it after i deleted the splunk.pid file from var/run folder inside splunk.

ssuluguri
Path Finder

Thanks for the update , Even I undergone the same issue , after performing suggested steps , splunk started

0 Karma

koshyk
Super Champion

for easier copy paste 🙂

rm $SPLUNK_HOME/var/run/splunk/splunkd.pid
$SPLUNK_HOME/bin/splunk status
$SPLUNK_HOME/bin/splunk start

N92
Path Finder

What's the reason for this? We are facing issue multiple time.

0 Karma
Get Updates on the Splunk Community!

Index This | I am a number, but when you add ‘G’ to me, I go away. What number am I?

March 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...

What’s New in Splunk App for PCI Compliance 5.3.1?

The Splunk App for PCI Compliance allows customers to extend the power of their existing Splunk solution with ...

Extending Observability Content to Splunk Cloud

Register to join us !   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to ...