LsaLogonUser error

[thorneja]

I'm getting a LsaLogonUser error: 0xc0000062 during the install after i enter the Splunk user and password. How do I get past this?

[thorneja · Accepted solution]

Solved it. I installed it from the command line with the launchsplunk=0 flag and let it install with the Local System account. Then I changed the log on account for the splunkd and splunkweb services before starting them.

[thorneja]

Yes, I created an account, splunkadmin, and entered it there with the password. I'll be pulling logs from other servers and the documentation said this was necessary.

[somesoni2]

Are you entering admin/changeme or any other account?

[thorneja]

Don't think that will help. I'm just at the beginning of the install where it asks what user will run Splunk.

[somesoni2]

Try steps from this

http://answers.splunk.com/answers/108654/cannot-login-already-tried-the-adminchangeme-thing