Splunk Enterprise

Error in upgrading Splunk Enterprise 8.2 to 9.0?

bidegp
Engager

Hello all,

I am trying to upgrade my Splunk Enterprise from 8.2.0 to 9.0.0 and I keep running into this error when the installer is done copying new files and does a 'rollback action'.

"setup cannot copy the file splknetdrv.sys ensure that the location specified below is correct or change it and insert splunk network monitor kernel driver in the drive you specify"

The file is in the correct location but when I hit retry it asks again. I finally just cancel and it asks "continue setup without copying file?" which I say yes. It then asks me the other two system files "SplunkMonitorNoHandleDrv.sys and splunkdrv.sys". Which brings the same error and says installation failed.

 

I ran as admin and also through powershell. I looked through my logs also and did not see any problems.

0 Karma

jguerttman
Explorer

I'm literally getting this same error. Any solutions other than basically rebuildling?

0 Karma

Sh4ne0
Explorer

Did you manage to resolve this - I am getting the same, no matter what account I try.

0 Karma

bidegp
Engager

Sorry getting to you late. I had just saved my configurations and certs and uninstalled the old version then reinstalled the new version.

Get Updates on the Splunk Community!

Splunk + ThousandEyes: Correlate frontend, app, and network data to troubleshoot ...

 Are you tired of troubleshooting delays caused by siloed frontend, application, and network data? We've got a ...

Splunk Observability for AI

Don’t miss out on an exciting Tech Talk on Splunk Observability for AI!Discover how Splunk’s agentic AI ...

🔐 Trust at Every Hop: How mTLS in Splunk Enterprise 10.0 Makes Security Simpler

From Idea to Implementation: Why Splunk Built mTLS into Splunk Enterprise 10.0  mTLS wasn’t just a checkbox ...