# Running Autopsy on macOS Monterey **URL:** \ **Category:** Autopsy on Linux / macOS\ **Created:** [September 6, 2022, 11:01pm UTC](https://sleuthkit.discourse.group/t/running-autopsy-on-macos-monterey/3387 "2022-09-06T23:01:37Z")\ **Posts on this page:** 8\ **Page:** 1
**Author:** ![hfisicaro](https://avatars.discourse-cdn.com/v4/letter/h/8e7dd6/32.png) [@hfisicaro](https://sleuthkit.discourse.group/u/hfisicaro)\ **Post date:** [September 6, 2022, 11:01pm UTC](https://sleuthkit.discourse.group/t/running-autopsy-on-macos-monterey/3387/1 "2022-09-06T23:01:37Z")
I’ve installed autopsy-4.19-2.2 on macOS Monterey. All Ok until I typed ./autopsy on the Terminal. Here’s the result: ![Captura de Pantalla 2022-09-06 a la(s) 19.49.05](https://global.discourse-cdn.com/free1/uploads/sleuthkit/original/2X/1/17d1d700423d7b8183261e25583130367438b5ee.png) ---
**Author:** ![gdicristofaro](https://yyz2.discourse-cdn.com/free1/user_avatar/sleuthkit.discourse.group/gdicristofaro/32/1468_2.png) [@gdicristofaro](https://sleuthkit.discourse.group/u/gdicristofaro)\ **Post date:** [September 8, 2022, 10:15pm UTC](https://sleuthkit.discourse.group/t/running-autopsy-on-macos-monterey/3387/2 "2022-09-08T22:15:35Z")
Hi @hfisicaro , Looking at that first line, it seems to indicate the jvm that is running is something greater than java 13. Would I be right in saying that you have at least two jvm’s installed on your system, the liberica jdk 1.8 from the directions as well as some other jvm? If that’s the case, could you try running this from the terminal: `/usr/libexec/java_home -v 1.8` This should give you the location of the liberica java 8 home. For me, it’s here: `/Library/Java/JavaVirtualMachines/liberica-jdk-8-full.jdk/Contents/Home` Then, you can set that as your `JAVA_HOME` environment variable or set it in your autopsy config file. If you want to set it in your config file, you would go to `/etc/autopsy.conf` where `` is where you have extracted that autopsy zip file. Then, you can add a new line to the config file like this: `jdkhome=` where `` is the location of your java 8 home. So for me, I added an entry that looks like this: `jdkhome=/Library/Java/JavaVirtualMachines/liberica-jdk-1.8.0_232/Contents/Home` Let us know if you are still hitting problems. Greg ---
**Author:** ![hfisicaro](https://avatars.discourse-cdn.com/v4/letter/h/8e7dd6/32.png) [@hfisicaro](https://sleuthkit.discourse.group/u/hfisicaro)\ **Post date:** [September 12, 2022, 11:43pm UTC](https://sleuthkit.discourse.group/t/running-autopsy-on-macos-monterey/3387/3 "2022-09-12T23:43:25Z")
> [@gdicristofaro](#): > > /usr/libexec/java\_home -v 1.8 Hi Greg. Thank you a lot. I had already done it adding jdkhome = $JAVA\_HOME as line 83 in my \/bin/autopsy file. In my case, the value of JAVA\_HOME is /Library/Java/JavaVirtualMachines/liberica-jdk-18.jdk/Contents/Home Unfortunately, the problem goes on. Horacio ---
**Author:** ![gdicristofaro](https://yyz2.discourse-cdn.com/free1/user_avatar/sleuthkit.discourse.group/gdicristofaro/32/1468_2.png) [@gdicristofaro](https://sleuthkit.discourse.group/u/gdicristofaro)\ **Post date:** [September 14, 2022, 1:06pm UTC](https://sleuthkit.discourse.group/t/running-autopsy-on-macos-monterey/3387/4 "2022-09-14T13:06:33Z")
Hi Horacio, So you are still seeing the same exact output when you run autopsy from terminal? I had a few questions for clarification. When you added to line 83, are you saying you changed to something like this? ```auto if [-f "${userdir}/etc/$APPNAME".conf] ; then . "${userdir}/etc/$APPNAME".conf jdkhome=$JAVA_HOME fi ``` Also, there is some environmental information that is captured in the logs that may be useful here. Autopsy should be saving application logs here: ` /Users//Library/Application Support/autopsy/dev/var/log` where `` is your MacOS username. In that directory there are hopefully files that start with `messages.log` (i.e. `messages.log`, `messages.log.1`, `messages.log.2`, etc.). As long as the execution got far enough to create those log files, there should be some environmental information at the top of the file like this: ```auto ------------------------------------------------------------------------------- >Log Session: Monday, September 12, 2022 3:29:02 PM EDT >System Info: Product Version = Autopsy 4.19.3 ... ------------------------------------------------------------------------------- ``` Certainly understand if you want to mask usernames or things like that, but if you could include as much of that information as possible between those dashed lines specifically, that would be helpful for debugging this issue. Thanks, Greg ---
**Author:** ![tt18](https://avatars.discourse-cdn.com/v4/letter/t/b487fb/32.png) [@tt18](https://sleuthkit.discourse.group/u/tt18)\ **Post date:** [March 17, 2023, 10:16am UTC](https://sleuthkit.discourse.group/t/running-autopsy-on-macos-monterey/3387/5 "2023-03-17T10:16:04Z")
> [@gdicristofaro](#): > > /Users//Library/Application Support/autopsy/dev/var/log Hi Greg, I am following your advice. I cannot get further than ```auto /Users//Library/Application Support ``` I have no autopsy folder here. I am getting this error when trying to run bin/autopsy ```auto tmc$ bin/autopsy The operation couldn’t be completed. Unable to locate a Java Runtime that supports (null). Please visit http://www.java.com for information on installing Java. Cannot find java. Please use the --jdkhome switch ``` I have also tried to edit the file as the previous user did and it still does not work. Any help would be appreicated! ---
**Author:** ![gdicristofaro](https://yyz2.discourse-cdn.com/free1/user_avatar/sleuthkit.discourse.group/gdicristofaro/32/1468_2.png) [@gdicristofaro](https://sleuthkit.discourse.group/u/gdicristofaro)\ **Post date:** [March 17, 2023, 11:59am UTC](https://sleuthkit.discourse.group/t/running-autopsy-on-macos-monterey/3387/6 "2023-03-17T11:59:36Z")
Hi @tt18 , Did you happen to run through the prerequisites [here](https://github.com/sleuthkit/autopsy/blob/develop/Running_Linux_OSX.md)? If so, could you let me know what output you get when you run these commands? `/usr/libexec/java_home -v 1.8` and `/usr/libexec/java_home -V` Thanks, Greg ---
**Author:** ![tt18](https://avatars.discourse-cdn.com/v4/letter/t/b487fb/32.png) [@tt18](https://sleuthkit.discourse.group/u/tt18)\ **Post date:** [March 17, 2023, 12:20pm UTC](https://sleuthkit.discourse.group/t/running-autopsy-on-macos-monterey/3387/7 "2023-03-17T12:20:04Z")
Hi, I get: ```auto /Library/Java/JavaVirtualMachines/liberica-jdk-8-full.jdk/Contents/Home ``` and ```auto /Library/Java/JavaVirtualMachines/jdk-13.0.1.jdk/Contents/Home ``` Thanks, Taylor ---
**Author:** ![gdicristofaro](https://yyz2.discourse-cdn.com/free1/user_avatar/sleuthkit.discourse.group/gdicristofaro/32/1468_2.png) [@gdicristofaro](https://sleuthkit.discourse.group/u/gdicristofaro)\ **Post date:** [March 17, 2023, 12:54pm UTC](https://sleuthkit.discourse.group/t/running-autopsy-on-macos-monterey/3387/8 "2023-03-17T12:54:33Z")
Hello again @tt18 , Thanks for getting back to me. Could you try opening `//etc/autopsy.conf` and look for a line like this: `jdkhome=/Library/Java/JavaVirtualMachines/liberica-jdk-8-full.jdk/Contents/Home`? If you don’t have a line like that, could you add it, and try running autopsy again?