Installation

Error when trying to install splunk on Windows Server 2008

bbarkinwilkins
New Member

When we try to install splunk on a Windows Server 2008, we get this error message: "Splunk Installer was unable to create Splunk Services."

We get the same error when we try to have it run as either a local system account or as an administrator account.

Any ideas?

Tags (1)
0 Karma

Ed
Splunk Employee
Splunk Employee

Did the error dialog have an error code? In most cases there are two reasons why Splunk would fail to create the services:

The user credentials provided do not have permission to create the service. If it's a new account, Log On As A Service might not be granted to the account. To test, try assigning an existing service to this user. Usually this shows an error code of 1.

The Splunk service may already exist on the machine. Sometimes uninstalls will mark the service for deletion, but will not actually remove it until a reboot. Usually this shows an error code of 2.

Please let me know if either of these are the case or if it's something different.

0 Karma

Ed
Splunk Employee
Splunk Employee

Interesting. Glad you were able to get it working. If it pops up again, the MSI log and more likely the Splunk-.log in the %TEMP% folder might provide more clues. The Splunk-.log gets overwritten with each run though, so no way to travel back in time to see what happened.

0 Karma

bbarkinwilkins
New Member

Thanks for the response Ed!

We received an error code of 1. But I don't think this had anything to do with the user permissions because the installation of Splunk 4.1 worked flawlessly. It was only Splunk 4.2 that did not work.

0 Karma

bbarkinwilkins
New Member

Quick update: it appears this problem only occurs with verison 4.2. I tried installing 4.1 and it worked perfectly.

0 Karma

bbarkinwilkins
New Member

Another update: once we had 4.1 installed, we were able to upgrade to 4.2 without a problem.

0 Karma
Get Updates on the Splunk Community!

New in Observability - Improvements to Custom Metrics SLOs, Log Observer Connect & ...

The latest enhancements to the Splunk observability portfolio deliver improved SLO management accuracy, better ...

Improve Data Pipelines Using Splunk Data Management

  Register Now   This Tech Talk will explore the pipeline management offerings Edge Processor and Ingest ...

3-2-1 Go! How Fast Can You Debug Microservices with Observability Cloud?

Register Join this Tech Talk to learn how unique features like Service Centric Views, Tag Spotlight, and ...