Splunk will not automatically start at boot time.
The /opt/splunk directory or any sub-directory is orphaned or not owned by the user that Splunk was configured to run at boot time.
1) Stop the splunk service.
2) Set the ownership to the right user, i.e.:
sudo chown -R splunk:splunk /opt/splunk
3) Start the Splunk service
4) Configure Splunk to start at boot time:
sudo $SPLUNK_HOME/bin/splunk enable boot-start -user <user_name>
Splunk Documentation:
Configure Splunk Enterprise to start at boot time:
Configure Splunk to start at boot time documentation
| Revision | Publish Date | Comments |
|---|---|---|
1.0 |
28-Sep-2026
|
Initial Release |