Splunk 7.x Quick Start Guide

Starting on reboot

By default, Splunk does not start when the server is rebooted; you will typically want it to do so. You can have Splunk create a script that starts it by executing an 'enable boot-start' command (as root, as this will alter OS level files):

[root@ip-172-31-28-164 ~]# cd /opt/splunk/bin[root@ip-172-31-28-164 bin]# ./splunk enable boot-start -user splunkInit script installed at /etc/init.d/splunk.Init script is configured to run at boot.

Then, edit the /etc/init.d/splunk file and add USER=splunk right after the RETVAL=0 entry near the top of the file:

#!/bin/sh## /etc/init.d/splunk# init script for Splunk.# generated by 'splunk enable boot-start'.## chkconfig: 2345 90 60# description: Splunk indexer service#RETVAL=0USER=splunk ...