Getting Data In

Can I configure the windows installer to not start Splunk right after it's installed?

hexx
Splunk Employee
Splunk Employee

I would like to make sure that the splunkd and splunkweb services aren't automatically started by the Splunk Windows installer right after the installation is finished.

How can this be achieved?

1 Solution

hexx
Splunk Employee
Splunk Employee

Passing the "LAUNCHSPLUNK=0" argument to the Splunk MSI installer with msiexec will prevent splunkd and splunkweb from starting automatically.

Example for a Splunk 4.1.4 x86 installer :

C:\Downloads> msiexec /i splunk-4.1.4-82143-x86-release.msi LAUNCHSPLUNK=0

Note that this will also configure both services for a manual startup, so make sure you change that afterward if that's not the desired setting.

More flags that can be passed to the Splunk Windows installer to automate your deployment can be found in the web documentation :

http://www.splunk.com/base/Documentation/latest/Installation/InstallonWindowsviathecommandline#Suppo...

View solution in original post

hexx
Splunk Employee
Splunk Employee

Passing the "LAUNCHSPLUNK=0" argument to the Splunk MSI installer with msiexec will prevent splunkd and splunkweb from starting automatically.

Example for a Splunk 4.1.4 x86 installer :

C:\Downloads> msiexec /i splunk-4.1.4-82143-x86-release.msi LAUNCHSPLUNK=0

Note that this will also configure both services for a manual startup, so make sure you change that afterward if that's not the desired setting.

More flags that can be passed to the Splunk Windows installer to automate your deployment can be found in the web documentation :

http://www.splunk.com/base/Documentation/latest/Installation/InstallonWindowsviathecommandline#Suppo...

gkanapathy
Splunk Employee
Splunk Employee

Please note that you must not enable any app during install, i.e., SPLUNK_APP="" must also be provided. Otherwise, the LAUNCHSPLUNK=0 flag will be ignored. The default SPLUNK_APP setting varies from version to version, so it is safest to specify SPLUNK_APP=""

hexx
Splunk Employee
Splunk Employee

The following Splunk Answer, which covers the topic of automated large-scale deployment in a Windows environment, deserves to be pointed out here as suggested further reading : http://answers.splunk.com/questions/434/can-i-auto-install-or-deploy-splunk-onto-all-my-remote-windo...

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

A Four-Part Event Series: Full Stack Observability For the AI Era

As AI reshapes applications, infrastructure, and the way teams operate, the traditional boundaries of ...

SOC4Kafka - New Kafka Connector Powered by OpenTelemetry

The new SOC4Kafka connector, built on OpenTelemetry, enables the collection of Kafka messages and forwards ...

Event Series: Level up your SOC: Advancing with Splunk Enterprise Security

AI has fundamentally raised the stakes for security operations, and this three-part series is your guide to ...