Rollback Error during Splunk Enterprise installation on Windows server 2012 R2

[Dinesh_Raja]

Hello All,

I m trying to install Splunk 6.6.6 Windows 64 bit version on Windows 2012 R2 Server. But i am getting Rollback action screen and ended up with "Splunk Enterprise Setup Wizard ended prematurely" window.

I have gone through the similar issues on Splunk answers and couldn't find the resolution. I have Local Admin access for the respective server, There is enough space is in C: drive and also i can able to install Splunk universal forwarder 7.0.2 on same server without any issues.

Looking forward for your answers.

]1

[skoomasteve]

Something to try for anyone still experiencing this:
Go to local security policy--computer config--windows settings--security settings--user rights assignment and Check to make sure the AD account you're naming in the install wizard is not listed in "deny log on locally"

[Dinesh_Raja]

P.S : The issue was due to service account permissions.

[dkcampbell]

Can you provide more information about the specific service account permissions that were necessary to fix this?

[Dinesh_Raja]

P.S : I can able to install Splunk as 'Local System Account' , but unable to Install as 'Domain Account'. Could anyone suggest, what could be the issue?
Thanks.

[p_gurav]

Hi,

Can you try running below command before installing:

 msiexec /x splunk-<version>-x64.msi

[Dinesh_Raja]

@p_gurav, Thanks for suggestion.
I m getting "The installation package could not be opened. verify that the package exists" dialog box.

[p_gurav]

Run this command where you splunk .msi package is located

[p_gurav]

Try using below links:

http://docs.splunk.com/Documentation/Splunk/7.0.2/Installation/PrepareyourWindowsnetworkforaSplunkin...

[Dinesh_Raja]

Hi @p_gurav,
The document mostly suggests about permissions only. I have local admin access, member of AD Domain.