Getting Data In

Splunk 7.0 installation failed to complete

freedg
Engager

I am upgrading to Splunk 7.0. The installer hangs and does not complete.
Running Win10 1703 on vmware 12

looking for help

DanielASG
Explorer

i had the same issue with splunk 6.6.3

the issue was a windows registry key blocking it

so windows thinks its already installed

you need to find the registry key and remove it and it will work

0 Karma

freedg
Engager

It turns out that 6.6 and 7.0 would not install. I added IIS components to win10 and it finally installed and would run.
thank you for your help!!

0 Karma

jhornsby
Splunk Employee
Splunk Employee

Hi,

To assist further we're going to need an Installer log. The command to use is:
msiexec /i splunk.msi /l*vx msiexec.log

If you can get us a copy of the resulting msiexec.log, and also %TEMP%\splunk.log (if it exists), hopefully we'll be able to determine what is going on.

Cheers,

- Jo.

0 Karma

kevinmanson
Explorer

Same problem here. Below is the end of the splunk log file from TEMP. the last error before removing is DS init failed: Deployment Server not available on a dedicated forwarder

Successfully processed 31 files; Failed processing 0 files
HTTP/1.1 200 OK
Date: Thu, 28 Sep 2017 14:49:38 GMT
Expires: Thu, 26 Oct 1978 00:00:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, max-age=0
Content-Type: text/xml; charset=UTF-8
X-Content-Type-Options: nosniff
Content-Length: 1930
Connection: Close
X-Frame-Options: SAMEORIGIN
Server: Splunkd

/services/apps/local
2017-09-28T10:49:38-04:00

<name>Splunk</name>

0
30
0

<s:msg type="INFO">Restart required by: default-mode, limits, server, web</s:msg>

DS init failed: Deployment Server not available on a dedicated forwarder.
Removing service SplunkForwarder
Service removed
Disabled.

0 Karma

jhornsby
Splunk Employee
Splunk Employee

Hi kevinmanson,

Is this also 7.0? And are you specifying a Deployment Server?

Cheers,

- Jo.

0 Karma
Get Updates on the Splunk Community!

Enterprise Security Content Update (ESCU) | New Releases

In September, the Splunk Threat Research Team had two releases of new security content via the Enterprise ...

New in Observability - Improvements to Custom Metrics SLOs, Log Observer Connect & ...

The latest enhancements to the Splunk observability portfolio deliver improved SLO management accuracy, better ...

Improve Data Pipelines Using Splunk Data Management

  Register Now   This Tech Talk will explore the pipeline management offerings Edge Processor and Ingest ...