We were initially trying to upgrade from 6.0.3 to 6.1.1. However, we keep receiving the following message, "Splunk license agreement was not accepted. If installing silently, please pass AGREEMENT LICENSE=Yes".
When we try to uninstall Splunk from Add/Remove Programs we receive the same error as when we try to run the upgrade.
The service is still installed, but will not start and we receive the following error, "Windows could not start the SplunkForwarder service on Local Computer. Error 3: The system cannot find the path specified."
We tried deleting the SplunkForwarder directory, but that doesn't help either.
We had a similar issue.
First pull up the command line and do this:
sc delete [service name]
You'll likely have to remove splunkd and splunkweb.
In regards to the license file, we just simply removed the old license and added it again (the one we received from our splunk rep.
On a side note, we have three iterations of splunk, this only happened on one of them. We have no rhyme or reason as to why this happened, but what I stated above was the work around.
We had a similar issue.
First pull up the command line and do this:
sc delete [service name]
You'll likely have to remove splunkd and splunkweb.
In regards to the license file, we just simply removed the old license and added it again (the one we received from our splunk rep.
On a side note, we have three iterations of splunk, this only happened on one of them. We have no rhyme or reason as to why this happened, but what I stated above was the work around.
Thanks this helped. We also had a few where we had to upgrade to 6.0.3 and then to 6.1.1.
Thanks this helped. We also had a few where we had to upgrade to 6.0.3 and then to 6.1.1.