I'm trying to upgrade splunk to the version 6.2 on windows 7 64 bits, it performed a "rollback action" during which I got the message : " splunk Enterprise setup wizard ended prematurely because of an error. Your system has not been modified... "
when i write splunk status on CLI i got the message : "splunkd : unable to obtain status".
Any help please ?? Thanks
6.2.1 is now available and should have fixed this.
http://docs.splunk.com/Documentation/Splunk/latest/ReleaseNotes/6.2.1#Highlighted_issues
Thanks, that corresponds with my own findings.
Bruch can you please provide the information I requested on the case to follow up.
Burch, not Bruch 😉
I send it about 5min ago so it should be going through the magic email systems now but let me know if you don't get it anytime soon. Thanks for the support!
Burch, did you find a solution ?
Nope. Just that the workaround didn't work...around.
(Either your comment got moved from an Answer to a Comment, or I'm in the matrix about to have some Smith's on me...Déjà vu).
My comment got moved from an answer to a comment because it's not an answer but it's a comment 😄 😄
same here ! Does anyone find a solution ?
Same here, this is unrelated to whether the splunk services run or even exist when installing or upgrading.
Conversely, I'm also experiencing the issue on fresh install (after uninstall) with no services pre-existing.
In my case, the splunkd and splunkweb services were both stopped prior to the upgrade, so this issue must be something else.
German Windows here... that matches what Wim and I found out yesterday from digging through my verbose install logs, apparently there's an issue with setting permissions during install when the Administrators group has a localized name... Windows and localization is terribly messy. A hacky workaround requires rebuilding the installer yourself, so I'd recommend waiting for a patched version.
I tried installing (not upgrading) splunk 6.2 on another windows 7 machine, but i still have the same problem !
Quick survey for those experiencing problems: What language is your Windows set to?
Portuguese
Windows in Spanish with the same issue.
My windows language is french !
For completeness' sake, running a Trial license here.
Also, quoting from the Deprecated features page:
Windows 7 and Windows 8 x86 & x86_64: Enterprise support for Windows 7 and Windows 8 x86 & x86_64 has been removed.
I see... that part seems to have worked in my upgrade install, but the splunk binary still reports 6.1.4 and hence doesn't listen on 8000. I guess I'll clean it out and make a fresh install, too murky to try and fix anything.
No, not an important Splunk instance 🙂
Splunkweb, as a service doesn't actually run anymore see:
and
http://docs.splunk.com/Documentation/Splunk/6.2/Admin/StartSplunk#Start_Splunk_Enterprise_on_Windows
It is installed in case one rolls back to legacy mode.
Running splunk enable boot-start
apparently recreates the services, and the splunkd service appears to be working. However, the splunkweb service kills itself right after starting with this entry in the Windows Application event logs:
The instance's SvcRun() method failed
Traceback (most recent call last):
File "C:\Program Files\Splunk\Python-2.7\Lib\site-packages\win32\win32serviceutil.py", line 835, in SvcRun self.SvcDoRun()
File "C:\Program Files\Splunk\bin\SplunkWebService.py", line 39, in SvcDoRun
from splunk.appserver.mrsparkle import root
File "C:\Program Files\Splunk\Python-2.7\Lib\site-packages\splunk\appserver\mrsparkle\__init__.py", line 13, in <module>
from lib.decorators import *
File "C:\Program Files\Splunk\Python-2.7\Lib\site-packages\splunk\appserver\mrsparkle\lib\decorators.py", line 2, in <module>
import cherrypy
ImportError: No module named cherrypy
%2: %3
Apparently more than just the services is broken 😞