topic Re: Splunk Installation error - "Splunk Enterprise Setup Wizard ended prematurely" in Getting Data In

Splunk Installation error - "Splunk Enterprise Setup Wizard ended prematurely"

monteirolopes — Tue, 15 Aug 2017 19:09:39 GMT

Hi,

I am trying to install Splunk 6.6.2 on Windows 2012 R2 x64 on disk 😧 (empty) and I getting error "Splunk Enterprise Setup Wizard ended prematurely". If I choose disk C: the installation works!

I tried some answers (https://answers.splunk.com/answers/232400/why-am-i-getting-error-splunk-enterprise-setup-wiz-2.html) but it doesn't work.

My user is admin.

Best regards,
Lopes.

Re: Splunk Installation error - "Splunk Enterprise Setup Wizard ended prematurely"

skoelpin — Tue, 15 Aug 2017 19:34:44 GMT

It could be a permissions issue.. You should download and run procmon and watch what happens as you try to install Splunk

Re: Splunk Installation error - "Splunk Enterprise Setup Wizard ended prematurely"

woodcock — Tue, 15 Aug 2017 23:59:03 GMT

This is ALWAYS a permission problem. Splunk cannot write to the disk.

Re: Splunk Installation error - "Splunk Enterprise Setup Wizard ended prematurely"

monteirolopes — Wed, 16 Aug 2017 00:03:47 GMT

I've used a local administrator and / or a domain administrator, and the problem still persists.
Can the issue be related to the disc type?

Re: Splunk Installation error - "Splunk Enterprise Setup Wizard ended prematurely"

monteirolopes — Wed, 16 Aug 2017 00:03:58 GMT

I've used a local administrator and / or a domain administrator, and the problem still persists.

Re: Splunk Installation error - "Splunk Enterprise Setup Wizard ended prematurely"

skoelpin — Wed, 16 Aug 2017 00:55:41 GMT

No, it's not a disk issue

Re: Splunk Installation error - "Splunk Enterprise Setup Wizard ended prematurely"

skoelpin — Wed, 16 Aug 2017 00:57:42 GMT

A simple solution would be not to run on Windows.. You need to run procmon while installing to find out the issue

Re: Splunk Installation error - "Splunk Enterprise Setup Wizard ended prematurely"

monteirolopes — Wed, 16 Aug 2017 12:27:00 GMT

Is there a specific keyword for the search? I running procmon but I do not understand much about processes

Re: Splunk Installation error - "Splunk Enterprise Setup Wizard ended prematurely"

monteirolopes — Wed, 16 Aug 2017 12:47:22 GMT

I found this log in my temp folder:

"unable to write 'random state'

e is 65537 (0x10001)

writing RSA key"

Re: Splunk Installation error - "Splunk Enterprise Setup Wizard ended prematurely"

skoelpin — Wed, 23 Aug 2017 15:36:00 GMT

You should be looking for any errors that occur. If you still cant get it working, you should open a ticket with support. They will want to review your procmon logs

Please close out the question if this answered your initial question