topic Re: SPLUNK install stuck on Please wait while the Setup Wizard installs Splunk Enterprise in Installation

SPLUNK install stuck on Please wait while the Setup Wizard installs Splunk Enterprise

gavinmckay — Sun, 16 Apr 2017 11:53:14 GMT

Hi folks,

Splunk Enterprise 6.5.3 installer on Windows Server 2012 R2, fully patched OS as of 16-4-2017.

Trying to install Splunk Enterprise on a sandbox environment with no Internet access. Install screen loads, starts to install, but is stuck on "Please wait while the Setup Wizard installs Splunk Enterprise". I can't see any errors in the event log related to Splunk installation, I checked the splunk.txt file in %TEMP% and there are no errors there either. Last entry in the txt file is:

"Successfully processed 64 files; Failed processing 0 files"

I've left it for hours, no further progress at all. Have tried logging off and back on again (same), and restarting the server (same).

Anyone seen this before?

Gavin.

Re: SPLUNK install stuck on Please wait while the Setup Wizard installs Splunk Enterprise

skoelpin — Sun, 16 Apr 2017 16:00:47 GMT

Try downloading Procmon and see what it's being caught up on.

https://technet.microsoft.com/en-us/sysinternals/processmonitor.aspx

You should open a support ticket, it could be a bug with v6.5.3

Re: SPLUNK install stuck on Please wait while the Setup Wizard installs Splunk Enterprise

jkat54 — Sun, 16 Apr 2017 16:12:43 GMT

Did you run the install as an administrator? It could be hung on a permissions error.

Re: SPLUNK install stuck on Please wait while the Setup Wizard installs Splunk Enterprise

gavinmckay — Mon, 17 Apr 2017 14:52:00 GMT

Hi again,

Thanks for your responses, they helped me to progress a bit further.

(@jkat54) I was logged in as Administrator, but starting the installer from an Admin command prompt got me to this stage (I couldn't see the Windows Installer UI window before):

The Windows Installer Coordinator issue is a known problem when Remote Desktop Services is installed:
https://support.microsoft.com/en-au/help/2655192/installation-can-fail-with-window-installer-coordinator-error

I uninstalled Remote Desktop Services (I wasn't using it, and didn't know it was baked in to the image I was given) via PowerShell using:

Uninstall-WindowsFeature -ComputerName xxxx-Name RDS-Connection-Broker, RDS-Licensing, RDS-RD-Server, RDS-Web-Access, RDS-Licensing-UI

When I rebooted and tried the install again, it seemed to get further but I'm still getting hung up and when I try and cancel the process or log off I get:

@skoelpin I will try and monitor the system and see if anything flags in ProcessMonitor.

Re: SPLUNK install stuck on Please wait while the Setup Wizard installs Splunk Enterprise

gavinmckay — Mon, 17 Apr 2017 15:09:51 GMT

OK I enabled full logging on the installer using /lv log.txt and the last entry before it pauses is:

Execute string: cmd.exe /c "D:\Program Files\Splunk\splunk.exe" enable boot-start-loop --answer-yes --no-prompt --accept-license

And that's as far as it is getting at the moment. I tried running the command, and it starts but then nothing ever completes.

Re: SPLUNK install stuck on Please wait while the Setup Wizard installs Splunk Enterprise

jkat54 — Mon, 17 Apr 2017 16:21:32 GMT

I've seen this before when group policy prevented local admins from creating services. It was a default at rackspace at that time. You'll need to check group policy.

https://serverfault.com/questions/55961/is-it-possible-to-use-group-policy-to-grant-the-permission-to-manage-windows-ser

Re: SPLUNK install stuck on Please wait while the Setup Wizard installs Splunk Enterprise

adonio — Mon, 17 Apr 2017 17:14:47 GMT

worth to check the logs splunk generates when not able to install
check undeR $SPLUNK_HOME

Re: SPLUNK install stuck on Please wait while the Setup Wizard installs Splunk Enterprise

kangje168 — Sat, 23 Jun 2018 11:12:00 GMT

Hey there,
Did you eventually solve this problem? I have the same problem now. How can we tell this to splunk. It seems to be a problem universal.
Thanks

Re: SPLUNK install stuck on Please wait while the Setup Wizard installs Splunk Enterprise

gavinmckay — Sat, 23 Jun 2018 11:41:21 GMT

Hi there,

No, I never did get it resolved 😞 I raised a support ticket for it (a long time ago now!) but ran out of time to troubleshoot.

I just recently turned to Prometheus instead, mainly because it had a Docker image that I could deploy in about 30 seconds. Open source + free was also a good extra benefit... I am just using it within a Docker environment though, not for enterprise monitoring so I can't really compare vs Splunk in that respect.

Hope you get yours working!

Regards,

Gavin.

Re: SPLUNK install stuck on Please wait while the Setup Wizard installs Splunk Enterprise

jkat54 — Sat, 23 Jun 2018 11:58:27 GMT

Check you windows application security and system event logs after the install fails to see if there are any additional details there.

Re: SPLUNK install stuck on Please wait while the Setup Wizard installs Splunk Enterprise

gavinmckay — Sun, 24 Jun 2018 02:34:29 GMT

...of course, Splunk has a docker image too...

https://hub.docker.com/r/splunk/splunk/

Re: SPLUNK install stuck on Please wait while the Setup Wizard installs Splunk Enterprise

chimajdev — Wed, 25 Mar 2020 22:36:48 GMT

I had to delete the SPlunk folder in Program Files, stopped splunkd that was running and then reinstalled again and it worked. once it is done installing, the program window may be hard to see, just hit enter and it will bring you to the UI localhost:8000 where you login. lol,I had to delete the directory where Splunk was installed in (Program Files) and then stopped splunkd processor, once i did that, the installation rolled back. Then I closed and reinstalled it again. it worked!

Re: SPLUNK install stuck on Please wait while the Setup Wizard installs Splunk Enterprise

simonlangley — Tue, 03 Jun 2025 12:06:00 GMT

Hi all - I had this very same issue (installer hanging in Windows 11 and then needing to be terminated via Task Manager) and spent ages looking at how to resolve. I noticed that I had a couple of pending Windows updates (including a hefty security patch) and once those had been installed and I rebooted, the Splunk install worked as expected. Not sure this will work for all instances of this particular issue, but it did for me and it is probably one of the easiest things to tick off before trying other options.

Hope this helps.