topic Re: Unable to install universal forwarder on Windows Server 2008 in Getting Data In

Unable to install universal forwarder on Windows Server 2008

christinmb — Fri, 24 Aug 2012 21:06:16 GMT

Im trying to install the universal forwarder in my windows server 2008 witht the remote windows data option but I keep getting the error:
Splunk Installer was unable to start Splunk Services.
Please make sure you have provided the correct username and/or password, and the user you are trying to run Splunk has the correct privileges. Exitcode='4'

And if I try to use the Splunk web and enter the Active Directory in the data inputs I get this error: Unable to open the selected path. Path doesnt exist or access is denied. and I was wondering if any of you knows why Im getting this errors.

Re: Unable to install universal forwarder on Windows Server 2008

rovechkin_splun — Fri, 24 Aug 2012 21:50:44 GMT

Is your user has admin privileges on the box where UF is installed? here is the link with required privileges:
http://docs.splunk.com/Documentation/Splunk/latest/Installation/InstallonWindows

Re: Unable to install universal forwarder on Windows Server 2008

christinmb — Mon, 27 Aug 2012 14:58:49 GMT

Yes, it has admin privileges, thanks anyway. Already fixed it

Re: Unable to install universal forwarder on Windows Server 2008

rovechkin_splun — Mon, 27 Aug 2012 17:20:29 GMT

what was the issue then?

Re: Unable to install universal forwarder on Windows Server 2008

christinmb — Tue, 28 Aug 2012 20:08:08 GMT

The remote event logs collection was because my splunkD service was working as a local account, the issue corrected when I entered a domain account in the "Log on" option in the SplunkD service. The other issue I don't know how to fix it, I was doing the installation for remote windows data and should be local.