Splunk Enterprise Security
Highlighted

Re: Upgrade Enterprise Security from 3.3.x to 4.0 hangs on "Disabling Apps"

Explorer

We had the same issue - in the end we basically reinstalled:

  1. Removed /opt/splunk
  2. Installed Splunk Enterprise and configure (took about 30 minutes)
  3. Installed Splunk ES 4.0.1 and configured (initial conf took about an hour, then a few days to get it just right)

When fresh, it worked without issue.

0 Karma