Installation

Having trouble opening Splunk after install on macOS

brentrmc
Explorer

I downloaded .dmg file for Splunk Enterprise 7.2.6 on MacOS Mojave and followed the installation steps, but can't seem to open Splunk. I got the message that the installation was successful, but don't understand the problem.

Here's the message I receive when I try to open Splunk:

292:293: syntax error: Expected “"” but found unknown token. (-2741)
ERROR: Failed in Main operations dialog: 360:361: syntax error: Expected “"” but found unknown token. (-2741). (1)

Labels (1)
0 Karma
1 Solution

splunk_sv
Path Finder

Try to start Splunk using command line(terminal),

Use the following command to start Splunk from terminal,

/Applications/Splunk/bin/splunk start

Once it completes it provides a URL to access Splunk, sample output of the command is given below,

root:~$ /Applications/Splunk/bin/splunk start

Splunk> Finding your faults, just like mom.

Checking prerequisites...
    Checking http port [8000]: open
    Checking mgmt port [8089]: open
    Checking appserver port [127.0.0.1:8065]: open
    Checking kvstore port [8191]: open
    Checking configuration...  Done.
    Checking critical directories...    Done
    Checking indexes...
        Validated: _audit _internal _introspection _telemetry _thefishbucket history main service_stats summary
    Done
    Checking filesystem compatibility...  Done
    Checking conf files for problems...
    Done
    Checking default conf files for edits...
    Validating installed files against hashes from '/Applications/Splunk/splunk-7.1.2-a0c72a66db66-darwin-64-manifest'
    All installed files intact.
    Done
All preliminary checks passed.

Starting splunk server daemon (splunkd)...  
Done


Waiting for web server at http://127.0.0.1:8000 to be available..... Done


If you get stuck, we're here to help.  
Look for answers here: http://docs.splunk.com

The Splunk web interface is at http://127.0.0.1:8000

And to check the status use the following command,

/Applications/Splunk/bin/splunk status

And to stop Splunk, use the following command,

/Applications/Splunk/bin/splunk stop

Hope it helps!

View solution in original post

0 Karma

woodcock
Esteemed Legend

I never use dmg or rpm; I always download the tgz and use that. Get the tgz for darwin and use that. It will be cake.

0 Karma

splunk_sv
Path Finder

Try to start Splunk using command line(terminal),

Use the following command to start Splunk from terminal,

/Applications/Splunk/bin/splunk start

Once it completes it provides a URL to access Splunk, sample output of the command is given below,

root:~$ /Applications/Splunk/bin/splunk start

Splunk> Finding your faults, just like mom.

Checking prerequisites...
    Checking http port [8000]: open
    Checking mgmt port [8089]: open
    Checking appserver port [127.0.0.1:8065]: open
    Checking kvstore port [8191]: open
    Checking configuration...  Done.
    Checking critical directories...    Done
    Checking indexes...
        Validated: _audit _internal _introspection _telemetry _thefishbucket history main service_stats summary
    Done
    Checking filesystem compatibility...  Done
    Checking conf files for problems...
    Done
    Checking default conf files for edits...
    Validating installed files against hashes from '/Applications/Splunk/splunk-7.1.2-a0c72a66db66-darwin-64-manifest'
    All installed files intact.
    Done
All preliminary checks passed.

Starting splunk server daemon (splunkd)...  
Done


Waiting for web server at http://127.0.0.1:8000 to be available..... Done


If you get stuck, we're here to help.  
Look for answers here: http://docs.splunk.com

The Splunk web interface is at http://127.0.0.1:8000

And to check the status use the following command,

/Applications/Splunk/bin/splunk status

And to stop Splunk, use the following command,

/Applications/Splunk/bin/splunk stop

Hope it helps!

0 Karma

brentrmc
Explorer

This answered my question. Thank you!

nvanderwalt_spl
Splunk Employee
Splunk Employee

Splunk runs as a service on your machine, and you have to use a browser to access it (for the most part).

Make sure to install it following these steps:
https://docs.splunk.com/Documentation/Splunk/7.2.4/Installation/InstallonMacOS

And start it using these steps:
https://docs.splunk.com/Documentation/Splunk/7.2.4/Installation/StartSplunkforthefirsttime

Cheers,
Nico

0 Karma
Get Updates on the Splunk Community!

What's new in Splunk Cloud Platform 9.1.2312?

Hi Splunky people! We are excited to share the newest updates in Splunk Cloud Platform 9.1.2312! Analysts can ...

What’s New in Splunk Security Essentials 3.8.0?

Splunk Security Essentials (SSE) is an app that can amplify the power of your existing Splunk Cloud Platform, ...

Let’s Get You Certified – Vegas-Style at .conf24

Are you ready to level up your Splunk game? Then, let’s get you certified live at .conf24 – our annual user ...