Getting Data In

Splunk Installation error - "Splunk Enterprise Setup Wizard ended prematurely"

monteirolopes
Communicator

Hi,

I am trying to install Splunk 6.6.2 on Windows 2012 R2 x64 on disk 😧 (empty) and I getting error "Splunk Enterprise Setup Wizard ended prematurely". If I choose disk C: the installation works!

I tried some answers (https://answers.splunk.com/answers/232400/why-am-i-getting-error-splunk-enterprise-setup-wiz-2.html) but it doesn't work.

My user is admin.

Best regards,
Lopes.

0 Karma

woodcock
Esteemed Legend

This is ALWAYS a permission problem. Splunk cannot write to the disk.

0 Karma

monteirolopes
Communicator

I've used a local administrator and / or a domain administrator, and the problem still persists.
Can the issue be related to the disc type?

0 Karma

skoelpin
SplunkTrust
SplunkTrust

No, it's not a disk issue

0 Karma

monteirolopes
Communicator

I found this log in my temp folder:

"unable to write 'random state'

e is 65537 (0x10001)

writing RSA key"

0 Karma

skoelpin
SplunkTrust
SplunkTrust

It could be a permissions issue.. You should download and run procmon and watch what happens as you try to install Splunk

monteirolopes
Communicator

I've used a local administrator and / or a domain administrator, and the problem still persists.

0 Karma

skoelpin
SplunkTrust
SplunkTrust

A simple solution would be not to run on Windows.. You need to run procmon while installing to find out the issue

0 Karma

monteirolopes
Communicator

Is there a specific keyword for the search? I running procmon but I do not understand much about processes

0 Karma

skoelpin
SplunkTrust
SplunkTrust

You should be looking for any errors that occur. If you still cant get it working, you should open a ticket with support. They will want to review your procmon logs

Please close out the question if this answered your initial question

0 Karma
Get Updates on the Splunk Community!

Splunk Observability Cloud | Unified Identity - Now Available for Existing Splunk ...

Raise your hand if you’ve already forgotten your username or password when logging into an account. (We can’t ...

Index This | How many sides does a circle have?

February 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...

Registration for Splunk University is Now Open!

Are you ready for an adventure in learning?   Brace yourselves because Splunk University is back, and it's ...