Hello,
I recently installed Splunk on my MacBook, but I'm not able to start the application. Anytime I open it, I get the following error in the terminal:
homePath='/Applications/Splunk/var/lib/splunk/audit/db' of index=_audit on unusable filesystem.
Validating databases (splunkd validatedb) failed with code '1'. If you cannot resolve the issue(s) above after consulting documentation, please file a case online at http://www.splunk.com/page/submit_issue
If anyone has ever encountered this issue, please let me know how this could be fix.
Thank you!
Have you tried this?
Add this line to $SPLUNK_HOME/etc/splunk-launch.conf
OPTIMISTIC_ABOUT_FILE_LOCKING = 1
https://answers.splunk.com/answers/306998/why-am-i-getting-homepathoptsplunkvarlibsplunkaudi.html
https://answers.splunk.com/answers/453977/macos-sierra-1012-kills-splunk.html
let me know if this helps!
Have you tried this?
Add this line to $SPLUNK_HOME/etc/splunk-launch.conf
OPTIMISTIC_ABOUT_FILE_LOCKING = 1
https://answers.splunk.com/answers/306998/why-am-i-getting-homepathoptsplunkvarlibsplunkaudi.html
https://answers.splunk.com/answers/453977/macos-sierra-1012-kills-splunk.html
let me know if this helps!
Hi mayurr98,
Thank you for quick response! Yes, this helped.