topic Installation issue in Installation

Installation issue

splunk9000 — Fri, 15 Jan 2016 17:10:10 GMT

I received this error message: splunk enterprise setup wizard ended prematurely because of an error. Your system has not been modified.
I use Windows Server 2012 R2. I received this error only when I selected domain\user account

Any help will be good. Thanks.

Re: Installation issue

ChrisG — Fri, 15 Jan 2016 18:13:34 GMT

What version of Splunk Enterprise? Are you installing in English or another language? Does your domain user have the right permissions to install? You might have to run the installation as Administrator.

There are a few other Answers postings about the same error message:

Re: Installation issue

jkat54 — Sun, 17 Jan 2016 14:52:07 GMT

Apparently the domain user account doesnt have permission to read and write in the splunk folder.

OR doesnt have permission to run as a service (Group Policy).
https://technet.microsoft.com/en-us/library/cc794944(v=ws.10).aspx <- allow user to run as service

Abbreviated solution:
A local administrator will need to.... go to start -> run -> gpedit.msc [click ok]

GroupPolicyObject [ComputerName] Policy -> Computer Configuration -> Windows Settings -> Security Settings ->Local Policies ->User Rights Assignment -> change "Log on as a service." to have domain user account within the list of allowed accounts.

Re: Installation issue

splunk9000 — Tue, 19 Jan 2016 18:44:03 GMT

Hi Chris,

splunk-6.3.2-aaff59bb082c-x64-release.msi
I use English system locale
I use the domain admin account for installing
Yes, I run splunk-6.3.2-aaff59bb082c-x64-release.msi under Administrator command prompt

Thanks,
Arthur

Re: Installation issue

splunk9000 — Tue, 19 Jan 2016 19:08:45 GMT

I use GPO. I have the domain group "domain\Splunk Accounts". I created the "domain\Splunk" user and added it to "domain\Splunk Accounts" group, This group has "Log on as a service" rights on the server where I try to install Splunk server.

Re: Installation issue

jkat54 — Thu, 21 Jan 2016 13:29:40 GMT

So does the user have write access to program files directory?