topic Re: Can't install universal forwarder on windows server 2012 R2 in Getting Data In

Can't install universal forwarder on windows server 2012 R2

JJBurgess — Sun, 07 Jun 2020 01:23:59 GMT

When I run the MSI installer for the universal forwarder on a clean install of windows server 2012 R2, I'm getting the following error from the GUI:

UniversalForwarder setup wizard ended prematurely because of an error. Your system has not been modified.

In the splunk.log file in the temp directory, there is only one line:

This appears to be your first time running this version of Splunk.

And in the /var/log/splunk/first_install.log file, again, there is no useful information:

VERSION=6.2.2
BUILD=255606
PRODUCT=splunk
PLATFORM=Windows-AMD64

I've enabled MSI logging and I've put the results in the gist below:

https://gist.github.com/anonymous/8b692986e99f8945a836

However I really have no idea what I'm looking for in this file. The user I'm trying to install this with is an administrator.

Re: Can't install universal forwarder on windows server 2012 R2

pappjr — Thu, 05 May 2016 19:45:09 GMT

I had to restart my Windows Server 2012 R2 then the install worked immediately. I have no idea why, and I don't like the solution but I'm happy it's working!

Re: Can't install universal forwarder on windows server 2012 R2

dantimola — Fri, 07 Apr 2017 07:47:15 GMT

That's too risky, I have the same problem too, I'm not allowed to reboot the server and even I'm allowed to do that, I'm not gonna do it specially if the server is on the production. Is there any suggested solution for this problem?

Re: Can't install universal forwarder on windows server 2012 R2

brreeves_splunk — Fri, 07 Apr 2017 12:53:45 GMT

@dantimola can you provide your logs?

Does the install appear to complete, then roll back from the end? or at what point does it fail?

Re: Can't install universal forwarder on windows server 2012 R2

dantimola — Thu, 10 Aug 2017 05:24:21 GMT

yes, the install almost complete, but eventually roll back from the end. Then splunk installation wizard will show a message stating that "UniversalForwarder setup wizard ended prematurely"

Re: Can't install universal forwarder on windows server 2012 R2

dantimola — Thu, 10 Aug 2017 05:31:23 GMT

FATAL HTTPServer - Could not bind to port 8089 here's the log

Re: Can't install universal forwarder on windows server 2012 R2

pckao — Fri, 19 Oct 2018 06:57:51 GMT

I found a solution. just turn off the SplunkForwarder in "winodws service", then reinstall splunkforwarder again, you will install successfully.

Re: Can't install universal forwarder on windows server 2012 R2

itishree123 — Wed, 27 May 2020 13:40:37 GMT

Windows 10
Windows Server 2016, 2019......u have installed or which one