topic Re: LsaLogonUser error in Installation

LsaLogonUser error

thorneja — Wed, 30 Apr 2014 19:32:37 GMT

I'm getting a LsaLogonUser error: 0xc0000062 during the install after i enter the Splunk user and password. How do I get past this?

Re: LsaLogonUser error

somesoni2 — Wed, 30 Apr 2014 19:39:45 GMT

Try steps from this

http://answers.splunk.com/answers/108654/cannot-login-already-tried-the-adminchangeme-thing

Re: LsaLogonUser error

thorneja — Wed, 30 Apr 2014 19:43:08 GMT

Don't think that will help. I'm just at the beginning of the install where it asks what user will run Splunk.

Re: LsaLogonUser error

somesoni2 — Wed, 30 Apr 2014 19:44:25 GMT

Are you entering admin/changeme or any other account?

Re: LsaLogonUser error

thorneja — Wed, 30 Apr 2014 19:46:12 GMT

Yes, I created an account, splunkadmin, and entered it there with the password. I'll be pulling logs from other servers and the documentation said this was necessary.

Re: LsaLogonUser error

thorneja — Wed, 30 Apr 2014 20:25:08 GMT

Solved it. I installed it from the command line with the launchsplunk=0 flag and let it install with the Local System account. Then I changed the log on account for the splunkd and splunkweb services before starting them.