Installation

OS X tar ball install procedures?

yuanliu
SplunkTrust
SplunkTrust

The install guide says simply untar. But that doesn't set $SPLUNK_HOME, etc.

error "ERROR: $SPLUNK_HOME passed into osxManageSplunk.sh is not a valid directory (path=The Splunk installer will replace the contents of this file with a path to the Splunk installation, WITHOUT a newline at the end.
)." number 1

Given time, I can fix most of these, but the instruction should include how to run installer. I'm using OS X 10.9.2.

Labels (1)

sunilpanda023
Path Finder

Reason this happens is because of how OS x launch works due to content in
/Applications/splunk/bin/splunk.app/Contents/Resources/SPLUNK_HOME.path

you can edit the contents of SPLUNK_HOME.path to /Applications/splunk

it worked for me.

gsaldi
Engager

This worked!

0 Karma

yuanliu
SplunkTrust
SplunkTrust

Not really different. I untarred in my Download/, then moved splunk/ to my Applications/, all under my /User/ home. Why is it different? I had the "unrecognized developer" block on start, so I followed the Splunk instruction to allow an security exception by starting from Finder. The problem is perhaps in the Apple script that the Finder technique invokes.

0 Karma

yuanliu
SplunkTrust
SplunkTrust

Not really different. I untarred in my Download/, then moved splunk/ to my Applications/, all under my /User/ home. Why is it different? I had the "unrecognized developer" block on start, so I followed the Splunk instruction to allow an security exception by starting from Finder. I think the problem is perhaps in the Apple script that the Finder technique invokes.

0 Karma

lguinn2
Legend

No splunk installation sets $SPLUNK_HOME, as far as I know.

I have installed Splunk on MAC OS X dozens of times, using the tar ball. I do it like this using a terminal window:

cd /Applications
tar -xzf splunkinstallerfile.tgz
cd splunk/bin
./splunk start

Where splunkinstallerfile.tgz is the path to the tar ball that you downloaded. Once you have untarred the file, Splunk is installed. There is no installer to run.

What are you doing?

Here are the installation instructions from the manual http://docs.splunk.com/Documentation/Splunk/latest/Installation/InstallonMacOS#tar_file_install

0 Karma

lguinn2
Legend

Hmm, it sounds like you have different user permissions, etc. than my Mac. My user account that runs Splunk has read/write privileges for all the files in /Applications/splunk - and it obviously has the ability to write in /Applications as well. I never start or access Splunk from Finder.

0 Karma

yuanliu
SplunkTrust
SplunkTrust

Not really different. I untarred in my Download/, then moved splunk/ to my Applications/, all under my /User/ home. Why is it different? I had the "unrecognized developer" block on start, so I followed the Splunk instruction to allow an security exception by starting from Finder. The problem is perhaps in the Apple script that the Finder technique invokes.

0 Karma
Get Updates on the Splunk Community!

Introducing the 2024 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...

Introducing the 2024 Splunk MVPs!

We are excited to announce the 2024 cohort of the Splunk MVP program. Splunk MVPs are passionate members of ...

Splunk Custom Visualizations App End of Life

The Splunk Custom Visualizations apps End of Life for SimpleXML will reach end of support on Dec 21, 2024, ...