Installation

installation rollback

aes
Explorer

I'm trying to install Splunk Enterprise version 9.1.2, which rolls back before finishing. I realized it goes almost until the end before starting to roll back since the folder /program files/Splunk size was increased to about Splunk's total size. Here is the log file. log 

Labels (1)
0 Karma
1 Solution

aes
Explorer

I solved it by installing openssl 1.1.1 instead of openssl 3.1.1

I think openssl 3.x.x still has some bugs.

View solution in original post

0 Karma

aes
Explorer

I solved it by installing openssl 1.1.1 instead of openssl 3.1.1

I think openssl 3.x.x still has some bugs.

0 Karma

gcusello
SplunkTrust
SplunkTrust

Hi @aes,

have you sufficient disk space to install the new version?

see in $SPLUNK_HOME\var\log\splunk if there's some interesting log, the one you shared is too long to analyze, please reduce it!

Ciao.

Giuseppe

aes
Explorer

I found this in python.log

2023-08-22 11:39:18,885 +0330 ERROR cli_common:1406 - Error configuring OpenSSL

5056:error:25078067:DSO support routines:WIN32_LOAD:could not load the shared library:.\crypto\dso\dso_win32.c:179:filename(providers.dll)

5056:error:25070067:DSO support routines:DSO_load:could not load the shared library:.\crypto\dso\dso_lib.c:233:

5056:error:0E07506E:configuration file routines:MODULE_LOAD_DSO:error loading dso:.\crypto\conf\conf_mod.c:271:module=providers, path=providers

5056:error:0E076071:configuration file routines:MODULE_RUN:unknown module name:.\crypto\conf\conf_mod.c:212:module=providers

Command failed (ret=1), exiting.

0 Karma

aes
Explorer

yes. I installed Splunk once before then I uninstalled and now I can't reinstall it.

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Best Practices: Splunk auto adjust pipeline queue

When you enable autoAdjustQueue in Splunk, maxSize should be understood as the queue size Splunk starts with ...

Introducing the 2026 - 2027 SplunkTrust cohort!

The goal of the SplunkTrust™ membership has historically been to acknowledge and recognize those who go above ...

Splunk Auto Ingestion Parallel Pipeline Scaling

Why this feature matters Many Splunk environments experience ingestion pressure long before the host is fully ...