Installation

LsaLogonUser error

thorneja
Explorer

I'm getting a LsaLogonUser error: 0xc0000062 during the install after i enter the Splunk user and password. How do I get past this?

0 Karma
1 Solution

thorneja
Explorer

Solved it. I installed it from the command line with the launchsplunk=0 flag and let it install with the Local System account. Then I changed the log on account for the splunkd and splunkweb services before starting them.

View solution in original post

0 Karma

thorneja
Explorer

Solved it. I installed it from the command line with the launchsplunk=0 flag and let it install with the Local System account. Then I changed the log on account for the splunkd and splunkweb services before starting them.

0 Karma

thorneja
Explorer

Yes, I created an account, splunkadmin, and entered it there with the password. I'll be pulling logs from other servers and the documentation said this was necessary.

0 Karma

somesoni2
Revered Legend

Are you entering admin/changeme or any other account?

0 Karma

thorneja
Explorer

Don't think that will help. I'm just at the beginning of the install where it asks what user will run Splunk.

0 Karma

somesoni2
Revered Legend
0 Karma
Get Updates on the Splunk Community!

Application management with Targeted Application Install for Victoria Experience

  Experience a new era of flexibility in managing your Splunk Cloud Platform apps! With Targeted Application ...

Index This | What goes up and never comes down?

January 2026 Edition  Hayyy Splunk Education Enthusiasts and the Eternally Curious!   We’re back with this ...

Splunkers, Pack Your Bags: Why Cisco Live EMEA is Your Next Big Destination

The Power of Two: Splunk + Cisco at "Ludicrous Scale"   You know Splunk. You know Cisco. But have you seen ...