Core 8.0 x64, file not found, but file exist

[deodion]

permissions/ownership changes not required, my bad..

Code: [Select]

# export SPLUNK_HOME=/opt/splunk
# export PATH=$SPLUNK_HOME/bin:$PATHwas all that was needed..

Firstly, from default installation, df -k shows I only get 323 MB for rootfs,
and I have the rest in /dev/sda1, so I was assuming this how things work, make the Core system lean and small,
and have others to put in /dev/sda1 instead,

tried to extract splunk to /opt, but it was out of space,

as a quick test replaced the symlink to ps (which Rich specifically said don't do..)

The export above seems doesnt contain about symlink change to ps, could you tell me how?
Any ps related should I work about?

Thank you very much,

[deodion]

OK deodion

This ps path issue is an easy fix.

Simply edit /opt/splunk/bin/pid_check.sh  to add /usr/local/bin: to this path variable

Code: [Select]

line 43: PATH=/usr/xpg4/bin:/usr/local/bin:/usr/bin:/bin
After loading procps.tcz splunk will look in /usr/local/bin for ps -p

thank you very much! I will try this later,

[coreplayer2]

Code: [Select]

/opt/splunk/bin $ ./splunk start

Splunk> Australian for grep.

Checking prerequisites...
        Checking http port [8000]: open
        Checking mgmt port [8089]: open
        Checking appserver port [127.0.0.1:8065]: open
        Checking kvstore port [8191]: open
        Checking configuration...  Done.
        Checking critical directories...        Done
        Checking indexes...
                Validated: _audit _internal _introspection _telemetry _thefishbucket history main summary
        Done
        Checking filesystem compatibility...  Done
        Checking conf files for problems...
        Done
        Checking default conf files for edits...
        Validating installed files against hashes from '/opt/splunk/splunk-6.6.2-4b804538c686-linux-2.6-x86_64-manifest'
        All installed files intact.
        Done
All preliminary checks passed.

Starting splunk server daemon (splunkd)... 
Done


Waiting for web server at http://127.0.0.1:8000 to be available....... Done


If you get stuck, we're here to help. 
Look for answers here: http://docs.splunk.com

The Splunk web interface is at http://box:8000

/opt/splunk/bin $


Code: [Select]

/opt/splunk/bin $ splunk status
splunkd is running (PID: 7593).
splunk helpers are running (PIDs: 7594 7603 7713 7752).
/opt/splunk/bin $

Splunk web server and interface appears to be working fine now

Access  Splunk>Enterprise @
http://box:8000

[coreplayer2]

So to recap..

These commands are all I executed to get Splunk operational

Code: [Select]

tar xvzf splunk-6.6.2-4b804538c686-Linux-x86_64.tgz -C /opt

[ -e /lib64 ] || ln -s /lib /lib64

export SPLUNK_HOME=/opt/splunk
export PATH=$SPLUNK_HOME/bin:$PATH

sed -i 's|PATH=/usr/xpg4/bin:/usr/bin:/bin|PATH=/usr/xpg4/bin:/usr/local/bin:/usr/bin:/bin|' /opt/splunk/bin/pid_check.sh

tce-load -i procps

/opt/splunk/bin $ ./splunk start --accept-license

UPDATE:  I missed a command, but added now

[deodion]

Code: (bash) [Select]

[ -e /lib64 ] || ln -s /lib /lib64
btw, what is the meaning of the first command?
I can't find any explanation in google,

[Misalf]

It's an  IF  statement. The  -e  means it returns true if the given file/directory exists.
http://www.tldp.org/LDP/abs/html/fto.html

[coreplayer2]

Code: [Select]

[ -e /lib64 ] || ln -s /lib /lib64
btw, what is the meaning of the first command?
I can't find any explanation in google,

Additionally, I read it like this: 
If the test command "[" /lib64 existence does not return true then execute "ln" command to create the symbolic link

BTW, you can create a shell script with those commands and run at boot to start the splunk server.  However, I'd test for the existence of /opt/splunk before executing tar..

Code: [Select]

[ -d /opt/splunk ] || tar xvzf /PathToArchive/splunk-6.6.2-4b804538c686-Linux-x86_64.tgz -C /opt

[deodion]

export SPLUNK_HOME=/opt/splunk
export PATH=$SPLUNK_HOME/bin:$PATH

I try to input export command above in bootlocal.sh, but it doesnt work?

I mean, if I echo $SPLUNK_HOME, its blank,

[gerald_clark]

Users do not inherit bootlocal.sh's environment.
Add it to /etc/profile or the users profile instead.

[deodion]

How should I put it in /etc/profile?

Can I simply insert the command?

[Rich]

Hi deodion
Add:

Code: [Select]

export SPLUNK_HOME=/opt/splunk
export PATH=$SPLUNK_HOME/bin:$PATHto the end of  /etc/profile.  Add the line:

Code: [Select]

etc/profileto your  /opt/filetool.lst  file. Backup and reboot.

[deodion]

If I put it on bootlocal.sh like below,

### Load /etc/profile
cp /mnt/sda1/backupcfg/profile /etc/profile

I try it, but it seems doesnt work, why?

Im trying not to use filetool.lst as much as I can,

[polikuo]

If I put it on bootlocal.sh like below,

### Load /etc/profile
cp /mnt/sda1/backupcfg/profile /etc/profile

I try it, but it seems doesnt work, why?

Im trying not to use filetool.lst as much as I can,

bootlocal.sh is IN mydata.tgz
You need to backup, one way or another.

[Rich]

Hi deodion

Im trying not to use filetool.lst as much as I can,

In that case just add those two lines to   .profile  in your home directory instead.

[deodion]

Hello Rich,
I see it working with filetool.sh,

is this because with where filetool.sh is being executed before /etc/profile execution?