Splunk installation error using latest verison of .MSI file

[munib1]

Hi, 

Please could you help me install using the MSI. I've tried to run as admin as well as normal. 

Its status bar goes up to 80% and then an error occurs and then it rolls back status and I can see it deleting files from the Splunk directory. I've tried to troubleshoot online however haven't been able to find solution to the problem. 

Thanks. 

[jho-splunk]

Hi @munib1,

Please see the following reply for instructions on how to troubleshoot: https://community.splunk.com/t5/Installation/Install-issue-on-Server-2016/m-p/540173/highlight/true#...

Cheers,

 - Jo.

[munib1]

Hi @jho-splunk, 

Solved the problem with the Splunk Slack community. Was directed to the %temp%/Splunk.log file and saw the below error:

ERROR: serverName must start with a letter, number, or underscore.  You have: -PC

I confirmed that indeed the computer was called "-PC" and then changed the name to something different. After a quick restart, I gave it one more shot and it successfully installed.

For other people who have this problem please check the.log file for any errors. 

[munib1 · Accepted solution]

Hi @jho-splunk 

Many thanks for replying. I have followed those steps, below are the 20 or so lines before the first occurrence of the "return value 3" Please let me know if you spot anything or want anything further?

MSI (s) (7C!48) [18:59:44:081]: Closing MSIHANDLE (68) of type 790531 for thread 10824
MSI (s) (7C!48) [18:59:44:081]: Creating MSIHANDLE (69) of type 790531 for thread 10824
FirstTimeRun:  Info:  Execute pre flight checks.
MSI (s) (7C!48) [18:59:44:082]: Closing MSIHANDLE (69) of type 790531 for thread 10824
MSI (s) (7C!48) [18:59:44:082]: Creating MSIHANDLE (70) of type 790531 for thread 10824
FirstTimeRun:  Info: Enter. Args: "C:\Program Files\Splunk\bin\splunk.exe", _internal pre-flight-checks --answer-yes --no-prompt
MSI (s) (7C!48) [18:59:44:082]: Closing MSIHANDLE (70) of type 790531 for thread 10824
MSI (s) (7C!48) [18:59:44:082]: Creating MSIHANDLE (71) of type 790531 for thread 10824
FirstTimeRun:  Info: SystemPath is: C:\WINDOWS\system32\
MSI (s) (7C!48) [18:59:44:082]: Closing MSIHANDLE (71) of type 790531 for thread 10824
MSI (s) (7C!48) [18:59:44:083]: Creating MSIHANDLE (72) of type 790531 for thread 10824
FirstTimeRun:  Info: Execute string: C:\WINDOWS\system32\cmd.exe /c ""C:\Program Files\Splunk\bin\splunk.exe" _internal pre-flight-checks --answer-yes --no-prompt >> "C:\Users\User\AppData\Local\Temp\splunk.log" 2>&1"
MSI (s) (7C!48) [18:59:44:083]: Closing MSIHANDLE (72) of type 790531 for thread 10824
MSI (s) (7C!48) [18:59:49:360]: Creating MSIHANDLE (73) of type 790531 for thread 10824
FirstTimeRun:  Info: WaitForSingleObject returned : 0x0
MSI (s) (7C!48) [18:59:49:361]: Closing MSIHANDLE (73) of type 790531 for thread 10824
MSI (s) (7C!48) [18:59:49:361]: Creating MSIHANDLE (74) of type 790531 for thread 10824
FirstTimeRun:  Info: Exit code for process : 0x1
MSI (s) (7C!48) [18:59:49:361]: Closing MSIHANDLE (74) of type 790531 for thread 10824
MSI (s) (7C!48) [18:59:49:361]: Creating MSIHANDLE (75) of type 790531 for thread 10824
FirstTimeRun:  Info: Leave.
MSI (s) (7C!48) [18:59:49:361]: Closing MSIHANDLE (75) of type 790531 for thread 10824
MSI (s) (7C!48) [18:59:49:362]: Creating MSIHANDLE (76) of type 790531 for thread 10824
FirstTimeRun:  Error: ExecCmd failed: 0x1.
MSI (s) (7C!48) [18:59:49:362]: Closing MSIHANDLE (76) of type 790531 for thread 10824
MSI (s) (7C!48) [18:59:49:362]: Creating MSIHANDLE (77) of type 790531 for thread 10824
FirstTimeRun:  Error 0x80004005: Cannot execute pre flight checks.
MSI (s) (7C!48) [18:59:49:362]: Closing MSIHANDLE (77) of type 790531 for thread 10824
CustomAction FirstTimeRun returned actual error code 1603 (note this may not be 100% accurate if translation happened inside sandbox)
MSI (s) (7C:C4) [18:59:49:363]: Closing MSIHANDLE (59) of type 790536 for thread 15184
Action ended 18:59:49: InstallFinalize. Return value 3.

---

@jho-splunk wrote:

Hi @munib1,

Please see the following reply for instructions on how to troubleshoot: https://community.splunk.com/t5/Installation/Install-issue-on-Server-2016/m-p/540173/highlight/true#...

Cheers,

 - Jo.

---