topic Re: Splunk 7.0 installation failed to complete in Getting Data In

Splunk 7.0 installation failed to complete

freedg — Wed, 27 Sep 2017 12:00:23 GMT

I am upgrading to Splunk 7.0. The installer hangs and does not complete.
Running Win10 1703 on vmware 12

looking for help

Re: Splunk 7.0 installation failed to complete

jhornsby — Thu, 28 Sep 2017 10:36:16 GMT

Hi,

To assist further we're going to need an Installer log. The command to use is:
msiexec /i splunk.msi /l*vx msiexec.log

If you can get us a copy of the resulting msiexec.log, and also %TEMP%\splunk.log (if it exists), hopefully we'll be able to determine what is going on.

Cheers,

- Jo.

Re: Splunk 7.0 installation failed to complete

freedg — Thu, 28 Sep 2017 10:58:21 GMT

It turns out that 6.6 and 7.0 would not install. I added IIS components to win10 and it finally installed and would run.
thank you for your help!!

Re: Splunk 7.0 installation failed to complete

kevinmanson — Thu, 28 Sep 2017 14:57:59 GMT

Same problem here. Below is the end of the splunk log file from TEMP. the last error before removing is DS init failed: Deployment Server not available on a dedicated forwarder

Successfully processed 31 files; Failed processing 0 files
HTTP/1.1 200 OK
Date: Thu, 28 Sep 2017 14:49:38 GMT
Expires: Thu, 26 Oct 1978 00:00:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, max-age=0
Content-Type: text/xml; charset=UTF-8
X-Content-Type-Options: nosniff
Content-Length: 1930
Connection: Close
X-Frame-Options: SAMEORIGIN
Server: Splunkd

/services/apps/local
2017-09-28T10:49:38-04:00

<name>Splunk</name>

0
30
0

<s:msg type="INFO">Restart required by: default-mode, limits, server, web</s:msg>

DS init failed: Deployment Server not available on a dedicated forwarder.
Removing service SplunkForwarder
Service removed
Disabled.

Re: Splunk 7.0 installation failed to complete

jhornsby — Thu, 28 Sep 2017 15:29:59 GMT

Hi kevinmanson,

Is this also 7.0? And are you specifying a Deployment Server?

Cheers,

- Jo.

Re: Splunk 7.0 installation failed to complete

DanielASG — Thu, 28 Sep 2017 16:31:22 GMT

i had the same issue with splunk 6.6.3

the issue was a windows registry key blocking it

so windows thinks its already installed

you need to find the registry key and remove it and it will work