I'm trying to install Splunk Universal Forwarder on Red Hat OS. I am getting stuck at this step. Before this command, I've already ran:
chown -R splunk /opt/app/splunkforwarder
chmod -R 755 /opt/app/splunkforwarder
The permissions and groups are all there. For some reason, it seems like it can't create /opt/app/splunkforwarder/var folder.
[root@server etc]# /opt/app/splunkforwarder/bin/splunk enable boot-start -user splunk --accept-license
Warning: cannot create "/opt/app/splunkforwarder/var/log/splunk"
Warning: cannot create "/opt/app/splunkforwarder/var/log/introspection"
First-time-run has not finished. Ignore this error when previewing migration - exiting.
↧