Splunk Error in ‘essinstall’
In my lab environment which is Splunk Enterprise 8.x , I installed Enterprise Security app successfully but got errors when configuring it.
The error log was full of below lines.
Error in 'essinstall' command: install_apps failed - Splunkd daemon is not responding: ('Error connecting to /services/apps/local: The read operation timed out',)
As that was a lab environment I looked for a workaround and found one.
I increased the time-out value of splunkd from 30secs to 600 secs (default is 30 seconds).
And configuration phase complated successfully without any error.
If you get the error in your production environment, you should troubleshoot it!
Stay in nest and stay safe!