Splunk Enterprise

Error in upgrading Splunk Enterprise 8.2 to 9.0?

bidegp
Engager

Hello all,

I am trying to upgrade my Splunk Enterprise from 8.2.0 to 9.0.0 and I keep running into this error when the installer is done copying new files and does a 'rollback action'.

"setup cannot copy the file splknetdrv.sys ensure that the location specified below is correct or change it and insert splunk network monitor kernel driver in the drive you specify"

The file is in the correct location but when I hit retry it asks again. I finally just cancel and it asks "continue setup without copying file?" which I say yes. It then asks me the other two system files "SplunkMonitorNoHandleDrv.sys and splunkdrv.sys". Which brings the same error and says installation failed.

 

I ran as admin and also through powershell. I looked through my logs also and did not see any problems.

0 Karma

jguerttman
Explorer

I'm literally getting this same error. Any solutions other than basically rebuildling?

0 Karma

Sh4ne0
Explorer

Did you manage to resolve this - I am getting the same, no matter what account I try.

0 Karma

bidegp
Engager

Sorry getting to you late. I had just saved my configurations and certs and uninstalled the old version then reinstalled the new version.

Career Survey
First 500 qualified respondents will receive a $20 gift card! Tell us about your professional Splunk journey.
Get Updates on the Splunk Community!

Tech Talk Recap | Mastering Threat Hunting

Mastering Threat HuntingDive into the world of threat hunting, exploring the key differences between ...

Observability for AI Applications: Troubleshooting Latency

If you’re working with proprietary company data, you’re probably going to have a locally hosted LLM or many ...

Splunk AI Assistant for SPL vs. ChatGPT: Which One is Better?

In the age of AI, every tool promises to make our lives easier. From summarizing content to writing code, ...