Getting Data In

Couldn't uninstall Splunk Enterprise from Windows 2012 server.

Dinesh_Raja
Path Finder

Hi All,

I have installed Splunk Universal forwarder & Splunk Enterprise (6.6.6) on a windows server machine. However, i don't need Splunk enterprise now on this machine. I uninstalled Splunk Enterprise application from control panel, however, i could see the 'Splunk' folder under program files directory. When i try to delete respective folder (460MB), i m getting error message of "This action can't be completed because the file is open in splunkd" and "This action can't be completed because the file is open in 52775fd4.rbf".

Looking forward for your support.

Regards,
Dinesh Raja

0 Karma
1 Solution

p_gurav
Champion

Did you stop splunk and then delete it?

View solution in original post

0 Karma

Dinesh_Raja
Path Finder

Forgot to stop Splunkd service. Uninstalled successfully after stop the service. Thanks @p_gurav .

0 Karma

p_gurav
Champion

Did you stop splunk and then delete it?

0 Karma

Dinesh_Raja
Path Finder

Thanks , Forgot to stop the service. It worked.

0 Karma

p_gurav
Champion

Happy to help!!!

0 Karma
Get Updates on the Splunk Community!

Introducing Ingest Actions: Filter, Mask, Route, Repeat

WATCH NOW Ingest Actions (IA) is the best new way to easily filter, mask and route your data in Splunk® ...

Splunk Forwarders and Forced Time Based Load Balancing

Splunk customers use universal forwarders to collect and send data to Splunk. A universal forwarder can send ...

NEW! Log Views in Splunk Observability Dashboards Gives Context From a Single Page

Today, Splunk Observability releases log views, a new feature for users to add their logs data from Splunk Log ...