Getting Data In

How to troubleshoot why Splunk Enterprise won't install on Server 2008 R2?

jweir
New Member

Gets partly through the install and the rolls back.

Are there any installation logs that may tell me what's holding things back?

Thanks,
Jason

0 Karma

dominiquevocat
SplunkTrust
SplunkTrust

We have the same issue and a support case open. No solution as of the last few err months...

0 Karma

wcolgate_splunk
Splunk Employee
Splunk Employee

You can check the %temp% directory of the user that installed splunk and look for a MSIxxxxxxx.log file. If you have many of them -- look for the one that installed splunk.

If you cannot find it, you can explicitly create an install log file with the following cli command:

$ msiexec /i /l*v

The Microsoft MSI installer subsystem will create a log file there. Once created we can crack it open and look to see what is going on.

0 Karma

richgalloway
SplunkTrust
SplunkTrust

Which product won't install? Enterprise, forwarder, Hunk?

---
If this reply helps you, Karma would be appreciated.
0 Karma

jweir
New Member

Sorry about that - Enterprise

0 Karma

richgalloway
SplunkTrust
SplunkTrust

It's been a long time since I installed Splunk on Win2008R2 and I no longer have that system.

There are three places I can think of to look:

C:\, C:\Windows\Temp, and the Event Viewer.
---
If this reply helps you, Karma would be appreciated.
0 Karma
Career Survey
First 500 qualified respondents will receive a $20 gift card! Tell us about your professional Splunk journey.
Get Updates on the Splunk Community!

What's New in Splunk Observability - August 2025

What's New We are excited to announce the latest enhancements to Splunk Observability Cloud as well as what is ...

Introduction to Splunk AI

How are you using AI in Splunk? Whether you see AI as a threat or opportunity, AI is here to stay. Lucky for ...

Splunk + ThousandEyes: Correlate frontend, app, and network data to troubleshoot ...

Are you tired of troubleshooting delays caused by siloed frontend, application, and network data? We've got a ...