Splunk Enterprise

Splunk Light on Mac fails to launch if your default shell is not bash

dw808303
New Member

This isn’t really a question, but more of an observation.

My default shell is fish ( https://fishshell.com/ ), and launching Splunk from the Finder doesn’t work unless I switch it back to Bash.

I haven't tried other non-default shells (like csh or ksh) but I imagine they would fail the same way.

0 Karma

jethompson_splu
Splunk Employee
Splunk Employee

Hello,

To be able to assist you with this issue can you please provide more information in regards to any errors being seen when attempting to start Splunk while using the FiSH Shell?

0 Karma

TomVS
New Member

Here is what happens on the fish shell @jethompson:

 (clear; '/Applications/Splunk/bin/splunk' ftr --accept-license || touch "/tmp/splunk_start_failed_3260"); rm "/tmp/splunk_start_running_619" 
Illegal command name '(clear; '/Applications/Splunk/bin/splunk' ftr --accept-license || touch "/tmp/splunk_start_failed_3260")'
fish:  (clear; '/Applications/Splunk/bin/splunk' ftr --accept-license || touch "/tmp/splunk_start_failed_3260"); rm "/tmp/splunk_start_running_619" 

Cheers 😉

0 Karma

jethompson_splu
Splunk Employee
Splunk Employee

Hello @TomVS

Thank you for the requested information. Please try running the following Command Set without the Parentheses:

$SPLUNK_HOME/bin/splunk start --accept-license

(For your Installation that would be: /Application/Splunk/bin/splunk )

I would like to get a little clarification in regards to how you have Splunk Service running on your Mac? The reason for asking this is I know that on a Linux System if a user account does not have direct access to Splunk you will see the following type of Error:

[jthompson@jthompsonlin02 ~]$ /opt/splunk/bin/splunk help
Please run 'splunk ftr' as boot-start user

The error reported above was produced when attempting to get the Splunk Help Menu as a Non-Root user. For my installation I am running Splunk as the splunk User. If you see the same error that I provided then the issue is most likely permissions of the user account attempting to start Splunk. If Splunk starts then there is an issue with the command set structure that is being used.

If you see the error provided above, please issue the sudo command prior to the Splunk Command set to advise of any errors.

0 Karma

TomVS
New Member

Hi @jethompson,

As soon as I started up a BASH shell, the above command worked fine on the same user.
It really is the case that the form of the command is not compatible with a FISH terminal. I don't really see it as a problem though, I am sure that people who use FISH would know how to reformat BASH commands, and if not, how to start up a BASH shell.

I just saw the question and that you needed more info so I posted it to you... I should have been more clear and explain that solving the issue was rather easy.

Thanks you for your response 🙂

0 Karma

jethompson_splu
Splunk Employee
Splunk Employee

@TomVS

Thank you for the update and I misunderstood the original post as more of a question in regards to using the Fish Shell and reformulating the command set issued to get things working.

I have confirmed that Splunk will run under the Fish Shell, which is why I suggested modifying the command set being used to see if that changes the behavior that you are seeing. You may also want to try removing the ' ' from the command set to see if that changes the behavior being seen.

Thank you,

0 Karma
Get Updates on the Splunk Community!

Index This | I am a number, but when you add ‘G’ to me, I go away. What number am I?

March 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...

What’s New in Splunk App for PCI Compliance 5.3.1?

The Splunk App for PCI Compliance allows customers to extend the power of their existing Splunk solution with ...

Extending Observability Content to Splunk Cloud

Register to join us !   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to ...