Unable to install or remove splunk

[bscahill]

Hello,

Whenever I try to install a new version or uninstall the current version on my system, I get an error message that the install failed, and the account already exists.

Any ideas?

[jho-splunk]

Hi @bscahill,

Please see the following reply for instructions on how to troubleshoot: https://community.splunk.com/t5/Installation/Install-issue-on-Server-2016/m-p/540173/highlight/true#...

Cheers,

 - Jo.

[gcusello]

Hi @bscahill,

some additional information:

• what Windows are you using?
• are you installing a Universal Forwarder?
• which error message are you receiving?
• which steps you followed before the error?

Ciao.

Giuseppe

[bscahill]

- Windows server 2016

- Yes, Universal Forwarder v.7.0.3.0 is installed. I can't remove or upgrade.

- I get 3x installion failed, and then saying the account already exists.

- I have tried uninstall via add/remove programs, I have tried repairing the install, I have tried upgrading the install. They all have the same error.

[gcusello]

Hi @bscahill,

it's the first time I see that message!

What user are you using for installation (Administrator)?

Try to run the setup file as an Administrator.

Ciao.

Giuseppe

[bscahill]

I have already tried running the install as a admin, and it makes no difference.

[gcusello]

Hi @bscahill,

let me understand:

• you have an already installed  UF version 7.0.3.0,
• you want to upgrade it to a new version,
• but the setup fails because says that "the user already exists",
• you also tried to uninstall it.

did you tried to stop the service before uninstall?

Otherwise I hint to open a case to Splunk Support.

Ciao.

Giuseppe

[bscahill]

There doesn't appear to be a service.

It looks like the program half uninstalled/upgraded and then stopped or something.

[gcusello]

Hi @bscahill,

if Splunk is running, it's in the services.

What does it happens if you try to remove it?

Ciao.

Giuseppe

[reg8667]

So i figured out how to move past this. I had to find the msi product code for the previous 3 versions and then search the registry for them  one by one.  If they exist they will be in the registry under windows installer\"theproductcode" . This entry has neither splunk nor universal forwarder in the string so it was unfound prior to this. Once i deleted the previous entries, i was able to install the new version.