Splunk Enterprise

Error in upgrading Splunk Enterprise 8.2 to 9.0?

bidegp
Engager

Hello all,

I am trying to upgrade my Splunk Enterprise from 8.2.0 to 9.0.0 and I keep running into this error when the installer is done copying new files and does a 'rollback action'.

"setup cannot copy the file splknetdrv.sys ensure that the location specified below is correct or change it and insert splunk network monitor kernel driver in the drive you specify"

The file is in the correct location but when I hit retry it asks again. I finally just cancel and it asks "continue setup without copying file?" which I say yes. It then asks me the other two system files "SplunkMonitorNoHandleDrv.sys and splunkdrv.sys". Which brings the same error and says installation failed.

 

I ran as admin and also through powershell. I looked through my logs also and did not see any problems.

0 Karma

jguerttman
Explorer

I'm literally getting this same error. Any solutions other than basically rebuildling?

0 Karma

Sh4ne0
Explorer

Did you manage to resolve this - I am getting the same, no matter what account I try.

0 Karma

bidegp
Engager

Sorry getting to you late. I had just saved my configurations and certs and uninstalled the old version then reinstalled the new version.

Get Updates on the Splunk Community!

Stay Connected: Your Guide to November Tech Talks, Office Hours, and Webinars!

What are Community Office Hours? Community Office Hours is an interactive 60-minute Zoom series where ...

Index This | When is October more than just the tenth month?

October 2025 Edition  Hayyy Splunk Education Enthusiasts and the Eternally Curious!   We’re back with this ...

Observe and Secure All Apps with Splunk

  Join Us for Our Next Tech Talk: Observe and Secure All Apps with SplunkAs organizations continue to innovate ...