<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Why is there Windows Installation Rollback error? in Installation</title>
    <link>https://community.splunk.com/t5/Installation/Why-is-there-Windows-Installation-Rollback-error/m-p/652827#M13136</link>
    <description>&lt;P&gt;I am performing a migration of an 8.2.2 Splunk instance into a new VM. I have copied the entire $SPLUNK_HOME (D:\Splunk) folder into the new VM machine and ran the installer. The installer fails with rollback. I have the logs with me and here is an excerpt of the failure:&lt;/P&gt;
&lt;P&gt;MSI (s) (DC:AC) [14:20:49:588]: Invoking remote custom action. DLL: C:\Windows\Installer\MSI3EE8.tmp, Entrypoint: FirstTimeRunCA&lt;BR /&gt;FirstTimeRun: Warning: Invalid property ignored: FailCA=.&lt;BR /&gt;FirstTimeRun: Info: Properties: splunkHome: D:\Splunk.&lt;BR /&gt;FirstTimeRun: Info: Execute first time run.&lt;BR /&gt;FirstTimeRun: Info: Enter. Args: "D:\Splunk\bin\splunk.exe", _internal first-time-run --answer-yes --no-prompt&lt;BR /&gt;FirstTimeRun: Info: SystemPath is: C:\Windows\system32\&lt;BR /&gt;FirstTimeRun: Info: Execute string: C:\Windows\system32\cmd.exe /c ""D:\Splunk\bin\splunk.exe" _internal first-time-run --answer-yes --no-prompt &amp;gt;&amp;gt; "C:\Users\********\AppData\Local\Temp\splunk.log" 2&amp;gt;&amp;amp;1"&lt;BR /&gt;FirstTimeRun: Info: WaitForSingleObject returned : 0x0&lt;BR /&gt;FirstTimeRun: Info: Exit code for process : 0x2&lt;BR /&gt;FirstTimeRun: Info: Leave.&lt;BR /&gt;FirstTimeRun: Error: ExecCmd failed: 0x2.&lt;BR /&gt;FirstTimeRun: Error 0x80004005: Cannot execute first time run.&lt;BR /&gt;CustomAction FirstTimeRun returned actual error code 1603 (note this may not be 100% accurate if translation happened inside sandbox)&lt;BR /&gt;Action ended 14:20:57: InstallFinalize. Return value 3.&lt;/P&gt;
&lt;P&gt;Anyone has any insights?&lt;/P&gt;</description>
    <pubDate>Wed, 02 Aug 2023 19:53:53 GMT</pubDate>
    <dc:creator>Stevelim</dc:creator>
    <dc:date>2023-08-02T19:53:53Z</dc:date>
    <item>
      <title>Why is there Windows Installation Rollback error?</title>
      <link>https://community.splunk.com/t5/Installation/Why-is-there-Windows-Installation-Rollback-error/m-p/652827#M13136</link>
      <description>&lt;P&gt;I am performing a migration of an 8.2.2 Splunk instance into a new VM. I have copied the entire $SPLUNK_HOME (D:\Splunk) folder into the new VM machine and ran the installer. The installer fails with rollback. I have the logs with me and here is an excerpt of the failure:&lt;/P&gt;
&lt;P&gt;MSI (s) (DC:AC) [14:20:49:588]: Invoking remote custom action. DLL: C:\Windows\Installer\MSI3EE8.tmp, Entrypoint: FirstTimeRunCA&lt;BR /&gt;FirstTimeRun: Warning: Invalid property ignored: FailCA=.&lt;BR /&gt;FirstTimeRun: Info: Properties: splunkHome: D:\Splunk.&lt;BR /&gt;FirstTimeRun: Info: Execute first time run.&lt;BR /&gt;FirstTimeRun: Info: Enter. Args: "D:\Splunk\bin\splunk.exe", _internal first-time-run --answer-yes --no-prompt&lt;BR /&gt;FirstTimeRun: Info: SystemPath is: C:\Windows\system32\&lt;BR /&gt;FirstTimeRun: Info: Execute string: C:\Windows\system32\cmd.exe /c ""D:\Splunk\bin\splunk.exe" _internal first-time-run --answer-yes --no-prompt &amp;gt;&amp;gt; "C:\Users\********\AppData\Local\Temp\splunk.log" 2&amp;gt;&amp;amp;1"&lt;BR /&gt;FirstTimeRun: Info: WaitForSingleObject returned : 0x0&lt;BR /&gt;FirstTimeRun: Info: Exit code for process : 0x2&lt;BR /&gt;FirstTimeRun: Info: Leave.&lt;BR /&gt;FirstTimeRun: Error: ExecCmd failed: 0x2.&lt;BR /&gt;FirstTimeRun: Error 0x80004005: Cannot execute first time run.&lt;BR /&gt;CustomAction FirstTimeRun returned actual error code 1603 (note this may not be 100% accurate if translation happened inside sandbox)&lt;BR /&gt;Action ended 14:20:57: InstallFinalize. Return value 3.&lt;/P&gt;
&lt;P&gt;Anyone has any insights?&lt;/P&gt;</description>
      <pubDate>Wed, 02 Aug 2023 19:53:53 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Installation/Why-is-there-Windows-Installation-Rollback-error/m-p/652827#M13136</guid>
      <dc:creator>Stevelim</dc:creator>
      <dc:date>2023-08-02T19:53:53Z</dc:date>
    </item>
    <item>
      <title>Re: Windows Installation Rollback error</title>
      <link>https://community.splunk.com/t5/Installation/Why-is-there-Windows-Installation-Rollback-error/m-p/652842#M13137</link>
      <description>&lt;P&gt;If anyone is stuck like me, the solution I had was to re-run with the same version of Splunk before running the latest installer.&lt;/P&gt;</description>
      <pubDate>Wed, 02 Aug 2023 08:17:08 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Installation/Why-is-there-Windows-Installation-Rollback-error/m-p/652842#M13137</guid>
      <dc:creator>Stevelim</dc:creator>
      <dc:date>2023-08-02T08:17:08Z</dc:date>
    </item>
  </channel>
</rss>

