Installation

Unable to install or remove splunk

bscahill
Observer

Hello,

Whenever I try to install a new version or uninstall the current version on my system, I get an error message that the install failed, and the account already exists.

Any ideas?

Labels (2)
0 Karma

jho-splunk
Splunk Employee
Splunk Employee

Hi @bscahill,

Please see the following reply for instructions on how to troubleshoot: https://community.splunk.com/t5/Installation/Install-issue-on-Server-2016/m-p/540173/highlight/true#...

Cheers,

 

 - Jo.

0 Karma

gcusello
Legend

Hi @bscahill,

some additional information:

  • what Windows are you using?
  • are you installing a Universal Forwarder?
  • which error message are you receiving?
  • which steps you followed before the error?

Ciao.

Giuseppe

0 Karma

bscahill
Observer

- Windows server 2016

- Yes, Universal Forwarder v.7.0.3.0 is installed. I can't remove or upgrade.

- I get 3x installion failed, and then saying the account already exists.

- I have tried uninstall via add/remove programs, I have tried repairing the install, I have tried upgrading the install. They all have the same error.

0 Karma

gcusello
Legend

Hi @bscahill,

it's the first time I see that message!

What user are you using for installation (Administrator)?

Try to run the setup file as an Administrator.

Ciao.

Giuseppe

0 Karma

bscahill
Observer

I have already tried running the install as a admin, and it makes no difference.

0 Karma

gcusello
Legend

Hi @bscahill,

let me understand:

  • you have an already installed  UF version 7.0.3.0,
  • you want to upgrade it to a new version,
  • but the setup fails because says that "the user already exists",
  • you also tried to uninstall it.

did you tried to stop the service before uninstall?

Otherwise I hint to open a case to Splunk Support.

Ciao.

Giuseppe

0 Karma

bscahill
Observer

There doesn't appear to be a service.

It looks like the program half uninstalled/upgraded and then stopped or something.

0 Karma

gcusello
Legend

Hi @bscahill,

if Splunk is running, it's in the services.

What does it happens if you try to remove it?

Ciao.

Giuseppe

0 Karma
Did you miss .conf21 Virtual?

Good news! The event's keynotes and many of its breakout sessions are now available online, and still totally FREE!