Installation

LsaLogonUser error

thorneja
Explorer

I'm getting a LsaLogonUser error: 0xc0000062 during the install after i enter the Splunk user and password. How do I get past this?

0 Karma
1 Solution

thorneja
Explorer

Solved it. I installed it from the command line with the launchsplunk=0 flag and let it install with the Local System account. Then I changed the log on account for the splunkd and splunkweb services before starting them.

View solution in original post

0 Karma

thorneja
Explorer

Solved it. I installed it from the command line with the launchsplunk=0 flag and let it install with the Local System account. Then I changed the log on account for the splunkd and splunkweb services before starting them.

0 Karma

thorneja
Explorer

Yes, I created an account, splunkadmin, and entered it there with the password. I'll be pulling logs from other servers and the documentation said this was necessary.

0 Karma

somesoni2
Revered Legend

Are you entering admin/changeme or any other account?

0 Karma

thorneja
Explorer

Don't think that will help. I'm just at the beginning of the install where it asks what user will run Splunk.

0 Karma

somesoni2
Revered Legend
0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Make Your Machine Data AI-Ready in Splunk

Every team is getting ready for AI agents.   Thursday, November 12, 2026  |  11AM  PST / 2PM EST   ...

Splunk Asynchronous Forwarding Explained

Splunk asynchronous forwarding is often misunderstood as simply setting autoLBVolume. That is not quite right. ...

How to Monitor AI Agents with Splunk Agent Observability

Let’s say I’m running a travel planning AI app in production. A user asks for three concise hotel options in ...