when installing Splunk 6.2.0-237341-x64-release on a GERMAN Windows Server 2012 R2 it breaks with error:
Action 18:26:24: SetAcls.
SetAcls: Warning: Invalid property ignored: FailCA=.
SetAcls: Info: SetAcls: Apply admin ACLS to: C:Program FilesSplunketc.
SetAcls: Info: Enter. Args: icacls, "C:Program FilesSplunketc" /T /C /grant Administrators:f
SetAcls: Info: Execute string: cmd.exe /c "icacls "C:Program FilesSplunketc" /T /C /grant Administrators:f >> "C:UsersADMINI~1.IMPAppDataLocalTempsplunk.log" 2>&1"
SetAcls: Info: WaitForSingleObject returned : 0x0
SetAcls: Info: Exit code for process : 0x534
SetAcls: Info: Leave.
SetAcls: Error: cannot set ACLs on etc folder: 0x534.
SetAcls: Error 0x80004005: Cannot set ACLs.
CustomAction SetAcls returned actual error code 1603 (note this may not be 100% accurate if translation happened inside sandbox)
Action ended 18:26:24: InstallFinalize. Return value 3.
Action 18:26:24: Rollback. Rolling back action:
You have to manually create local group "Administrators" with the same rights as german named group "Administratoren" to get the installer working.
It seems that the installer is not international 😉
There are some upgrade defects in 6.2, particularly for non-English versions of Windows. See this previous Splunk Answers thread. The defects should be fixed in an upcoming maintenance release.
Note, this affects clean installs as well - not just upgrades.