topic Re: Rollback Error during Splunk Enterprise installation on Windows server 2012 R2 in Installation

Rollback Error during Splunk Enterprise installation on Windows server 2012 R2

Dinesh_Raja — Sat, 06 Jun 2020 15:00:35 GMT

Hello All,

I m trying to install Splunk 6.6.6 Windows 64 bit version on Windows 2012 R2 Server. But i am getting Rollback action screen and ended up with "Splunk Enterprise Setup Wizard ended prematurely" window.

I have gone through the similar issues on Splunk answers and couldn't find the resolution. I have Local Admin access for the respective server, There is enough space is in C: drive and also i can able to install Splunk universal forwarder 7.0.2 on same server without any issues.

Looking forward for your answers.

Re: Rollback Error during Splunk Enterprise installation on Windows server 2012 R2

p_gurav — Fri, 09 Mar 2018 07:16:40 GMT

Hi,

Can you try running below command before installing:

 msiexec /x splunk-<version>-x64.msi

Re: Rollback Error during Splunk Enterprise installation on Windows server 2012 R2

Dinesh_Raja — Fri, 09 Mar 2018 07:34:11 GMT

@p_gurav, Thanks for suggestion.
I m getting "The installation package could not be opened. verify that the package exists" dialog box.

Re: Rollback Error during Splunk Enterprise installation on Windows server 2012 R2

p_gurav — Fri, 09 Mar 2018 07:46:04 GMT

Run this command where you splunk .msi package is located

Re: Rollback Error during Splunk Enterprise installation on Windows server 2012 R2

Dinesh_Raja — Fri, 09 Mar 2018 07:46:51 GMT

P.S : I can able to install Splunk as 'Local System Account' , but unable to Install as 'Domain Account'. Could anyone suggest, what could be the issue?
Thanks.

Re: Rollback Error during Splunk Enterprise installation on Windows server 2012 R2

p_gurav — Fri, 09 Mar 2018 07:52:13 GMT

Try using below links:

http://docs.splunk.com/Documentation/Splunk/7.0.2/Installation/PrepareyourWindowsnetworkforaSplunkinstallation

Re: Rollback Error during Splunk Enterprise installation on Windows server 2012 R2

Dinesh_Raja — Fri, 09 Mar 2018 09:49:28 GMT

Hi @p_gurav,
The document mostly suggests about permissions only. I have local admin access, member of AD Domain.

Re: Rollback Error during Splunk Enterprise installation on Windows server 2012 R2

Dinesh_Raja — Wed, 21 Mar 2018 11:53:15 GMT

P.S : The issue was due to service account permissions.

Re: Rollback Error during Splunk Enterprise installation on Windows server 2012 R2

dkcampbell — Wed, 24 Oct 2018 07:43:21 GMT

Can you provide more information about the specific service account permissions that were necessary to fix this?

Re: Rollback Error during Splunk Enterprise installation on Windows server 2012 R2

skoomasteve — Fri, 22 Nov 2019 20:07:57 GMT

Something to try for anyone still experiencing this:
Go to local security policy--computer config--windows settings--security settings--user rights assignment and Check to make sure the AD account you're naming in the install wizard is not listed in "deny log on locally"