I'm trying to install the Splunk forwarder 6.0.1 on Windows 2008 servers, and I get the following error in the splunk-utility log
ERROR RESTTester - tenant service initialization failed.
This issue was reproduced on multiple Win 2008 servers (32 + R2 64).
The command the installation hangs on is
splunkd rest --noauth POST /servicesNS/nobody/SplunkUniversalForwarder/data/outputs/tcp/server name=my.splunk.server:9997 although I get the error 4 times in the log.
Installer - "splunkforwarder-6.0.1-189883-x64-release"
There is a known issue for hanging installs on 6.0.1
"Installing the Windows universal forwarder with the Deployment Server and Indexer fields populated can cause the installation to hang. Leave these fields blank and the installation will complete successfully. (SPL-78756)"
Thanks for the quick response.
Is there any workaround for the installation to work with these fields populated?
no, if your affected there is no way around it; you will have to update your outputs.conf or deploymentclient.conf after the install is complete.