Installation

Installation process stops with “Service manager failed to open service Splunkd: The specified service does not exist as an installed service.”

Ellen
Splunk Employee
Splunk Employee

I am trying to install Spunk 4.1.3 on Windows XP with the default selections and under a user login with local administrator’s rights.
The installation process stops and a Window titled: “Splunk change service config” pops up and displays the message:

"Service manager failed to open service 'Splunkd': The specified service does not exist as an installed service."

A recheck of the user’s administrator’s privileges should be confirmed. Refer to the Windows installation doc and the necessary privileges here: http://www.splunk.com/base/Documentation/latest/Installation/InstallonWindows

To further debug the issue, an attempt to run: “msinfo32” to capture system information for this Windows host resulted in the following messages:

“Can’t collect information.  Cannot access the Windows Management Instrumentation software.  Windows Management files may be moved or missing”    

Why is this stalled?

1 Solution

Ellen
Splunk Employee
Splunk Employee

The same error message occurred when with another login with administrator’s group rights as well.

Check the status of the WMI service via Start > Run > enter services.msc and check to ensure the Windows Management Instrumentation service has been enabled.
Enable WMI and retry running msinfo32.

There are many online references on how to resolve the Windows “Can’t collect information” message.

In this case, the user found repairing WMI resolved their issue and thereafter installing Splunk was successful.

View solution in original post

Ellen
Splunk Employee
Splunk Employee

The same error message occurred when with another login with administrator’s group rights as well.

Check the status of the WMI service via Start > Run > enter services.msc and check to ensure the Windows Management Instrumentation service has been enabled.
Enable WMI and retry running msinfo32.

There are many online references on how to resolve the Windows “Can’t collect information” message.

In this case, the user found repairing WMI resolved their issue and thereafter installing Splunk was successful.

gkanapathy
Splunk Employee
Splunk Employee

At root, this is a result of COM+/DCOM permissions for the user/group on the machine. To view and edit those, you can use the Windows tool DCOMCNFG.EXE.

0 Karma
Get Updates on the Splunk Community!

Modern way of developing distributed application using OTel

Recently, I had the opportunity to work on a complex microservice using Spring boot and Quarkus to develop a ...

Enterprise Security Content Update (ESCU) | New Releases

Last month, the Splunk Threat Research Team had 3 releases of new security content via the Enterprise Security ...

Archived Metrics Now Available for APAC and EMEA realms

We’re excited to announce the launch of Archived Metrics in Splunk Infrastructure Monitoring for our customers ...