Getting Data In

splunk enterprise Upgrade from 5.0.5 to 6.1.1 failing

spsrasru
Path Finder

I'm upgrading splunk indexer server from 5.0.5 to 6.1.1 on Windows Server 2012.

I run the installer as a administrator but failed with errors.

this is the error i get from installation wizard:
Splunk installer was unable to launch splunk's First Time Run.
Error Code: 1

this is the error from migration log:
ERROR while running rename-cluster-app migration

Any help regarding this would be greatly appreciated!

Thanks,
Sam

Tags (2)
0 Karma

changwoo
Communicator

Try to delete /Applications/splunk directory and installing it.

0 Karma

spsrasru
Path Finder

Able to upgrade successfully once i delete the splunkd and splunkweb Service.

Run these commands using powershell:

((Get-WmiObject -class win32_service -filter "name = 'splunkweb'").stopService()
(Get-WmiObject -class win32_service -filter "name = 'splunkd'").stopService()
cmd
sc delete splunkd
sc delete splunkweb
exit

0 Karma

changwoo
Communicator

I tried to find the solution for your problem but there was no answer for it.
So I was wondering re-installing the splunk might help..

0 Karma

spsrasru
Path Finder

Sorry if i misunderstood....You mean $SLUNK_HOME/etc/apps/splunk ? how this is related ?

0 Karma
Get Updates on the Splunk Community!

Stay Connected: Your Guide to November Tech Talks, Office Hours, and Webinars!

What are Community Office Hours? Community Office Hours is an interactive 60-minute Zoom series where ...

Index This | When is October more than just the tenth month?

October 2025 Edition  Hayyy Splunk Education Enthusiasts and the Eternally Curious!   We’re back with this ...

Observe and Secure All Apps with Splunk

  Join Us for Our Next Tech Talk: Observe and Secure All Apps with SplunkAs organizations continue to innovate ...