Getting Data In

splunk enterprise Upgrade from 5.0.5 to 6.1.1 failing

spsrasru
Path Finder

I'm upgrading splunk indexer server from 5.0.5 to 6.1.1 on Windows Server 2012.

I run the installer as a administrator but failed with errors.

this is the error i get from installation wizard:
Splunk installer was unable to launch splunk's First Time Run.
Error Code: 1

this is the error from migration log:
ERROR while running rename-cluster-app migration

Any help regarding this would be greatly appreciated!

Thanks,
Sam

Tags (2)
0 Karma

changwoo
Communicator

Try to delete /Applications/splunk directory and installing it.

0 Karma

spsrasru
Path Finder

Able to upgrade successfully once i delete the splunkd and splunkweb Service.

Run these commands using powershell:

((Get-WmiObject -class win32_service -filter "name = 'splunkweb'").stopService()
(Get-WmiObject -class win32_service -filter "name = 'splunkd'").stopService()
cmd
sc delete splunkd
sc delete splunkweb
exit

0 Karma

changwoo
Communicator

I tried to find the solution for your problem but there was no answer for it.
So I was wondering re-installing the splunk might help..

0 Karma

spsrasru
Path Finder

Sorry if i misunderstood....You mean $SLUNK_HOME/etc/apps/splunk ? how this is related ?

0 Karma
Get Updates on the Splunk Community!

What’s New & Next in Splunk SOAR

Security teams today are dealing with more alerts, more tools, and more pressure than ever.  Join us on ...

Your Voice Matters! Help Us Shape the New Splunk Lantern Experience

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...

September Community Champions: A Shoutout to Our Contributors!

As we close the books on another fantastic month, we want to take a moment to celebrate the people who are the ...