How come my Splunk Enterprise security set up has failed?

[graju89]

Hi all,

I tried to install a new version of Splunk Enterprise Security. But the set up failed with the error

Installer was unable to start. Error in 'essinstall' command: (InstallException) Install cannot continue because some apps are managed via a deployment server: Splunk_TA_windows,Splunk_TA_nix

My ESS version is 5.1.1 and Splunk version is 7.2

Thanks,

[worshamn]

Yes, in the "Installation prerequisites" of the docs (http://docs.splunk.com/Documentation/ES/5.1.1/Install/InstallEnterpriseSecurity) it states:

If a deployment server manages any of the apps or add-ons included with Splunk Enterprise Security, remove the deploymentclient.conf file that contains references to the deployment server and restart Splunk services. If you do not do this, the installation will not complete.

I normally just rename the deploymentclient.conf file (like mv $SPLUNK_HOME/etc/system/local/deploymentclient.conf $SPLUNK_HOME/etc/system/local/deploymentclient.conf.old), restart Splunk, do the install then change the name back (and restart again).

[graju89]

Hi worshmn,

I tried that. still same. No improvements.