Installation

Unable to install or remove splunk

bscahill
Observer

Hello,

Whenever I try to install a new version or uninstall the current version on my system, I get an error message that the install failed, and the account already exists.

Any ideas?

Labels (2)
0 Karma

jho-splunk
Splunk Employee
Splunk Employee

Hi @bscahill,

Please see the following reply for instructions on how to troubleshoot: https://community.splunk.com/t5/Installation/Install-issue-on-Server-2016/m-p/540173/highlight/true#...

Cheers,

 

 - Jo.

0 Karma

gcusello
SplunkTrust
SplunkTrust

Hi @bscahill,

some additional information:

  • what Windows are you using?
  • are you installing a Universal Forwarder?
  • which error message are you receiving?
  • which steps you followed before the error?

Ciao.

Giuseppe

0 Karma

bscahill
Observer

- Windows server 2016

- Yes, Universal Forwarder v.7.0.3.0 is installed. I can't remove or upgrade.

- I get 3x installion failed, and then saying the account already exists.

- I have tried uninstall via add/remove programs, I have tried repairing the install, I have tried upgrading the install. They all have the same error.

0 Karma

gcusello
SplunkTrust
SplunkTrust

Hi @bscahill,

it's the first time I see that message!

What user are you using for installation (Administrator)?

Try to run the setup file as an Administrator.

Ciao.

Giuseppe

0 Karma

bscahill
Observer

I have already tried running the install as a admin, and it makes no difference.

0 Karma

gcusello
SplunkTrust
SplunkTrust

Hi @bscahill,

let me understand:

  • you have an already installed  UF version 7.0.3.0,
  • you want to upgrade it to a new version,
  • but the setup fails because says that "the user already exists",
  • you also tried to uninstall it.

did you tried to stop the service before uninstall?

Otherwise I hint to open a case to Splunk Support.

Ciao.

Giuseppe

0 Karma

bscahill
Observer

There doesn't appear to be a service.

It looks like the program half uninstalled/upgraded and then stopped or something.

0 Karma

gcusello
SplunkTrust
SplunkTrust

Hi @bscahill,

if Splunk is running, it's in the services.

What does it happens if you try to remove it?

Ciao.

Giuseppe

0 Karma

reg8667
New Member

So i figured out how to move past this. I had to find the msi product code for the previous 3 versions and then search the registry for them  one by one.  If they exist they will be in the registry under windows installer\"theproductcode" . This entry has neither splunk nor universal forwarder in the string so it was unfound prior to this. Once i deleted the previous entries, i was able to install the new version.

0 Karma
Get Updates on the Splunk Community!

Prove Your Splunk Prowess at .conf25—No Prereqs Required!

Your Next Big Security Credential: No Prerequisites Needed We know you’ve got the skills, and now, earning the ...

Splunk Observability Cloud's AI Assistant in Action Series: Observability as Code

This is the sixth post in the Splunk Observability Cloud’s AI Assistant in Action series that digs into how to ...

Splunk Answers Content Calendar, July Edition I

Hello Community! Welcome to another month of Community Content Calendar series! For the month of July, we will ...