How to run multiple splunk 6.2 instances on Windows?

[cdo_splunk]

How to run multiple splunk 6.2 instances on Windows?

[stephanefotso]

Easy! Just install splunk in differents folders, and set each defferent port for each splunk web and splunkd

[splunkIT]

I have tried that, and the installer only gave me the options to either repair or remove.

[stephanefotso]

ok stop all services of splunk and try again.

[AnilPujar]

doesn't work, gave a try with all most many possibilities. 😞

[splunkIT · Accepted solution]

Here are the steps I used to install multiple splunk 6.2 instances on my Windows 2008 box. Unfortunately, I don't know to create a new service for it; so I would have to start the splunkd instance in interactive mode.

Note: make sure that you unset SPLUNK_HOME in your PATH variable.

Run this CLI command to extract the .msi package:

msiexec /a <path to you splunk install .msi package> /qb TARGETDIR=<path to extract the new splunk installation> 

Example:

msiexec /a C:\temp\splunk-6.2.2-255606-x64-release.msi /qb TARGETDIR=C:\my_new_splunk_instance

Next: cd into C:\my_new_splunk_instance\Splunk\bin and run:

splunk start --nodaemon

If you have the existing splunk instance running, you will be prompted to specify new tcp ports for the new install to use.
Now, you should have a DOS window with splunkd running. To stop splunk, just hit crtl + c, and wait a few seconds.

[splunkIT]

Also, for pre 6.2 releases, you would also need to startup the splunkweb process:

splunk start splunkd --nodaemon
splunk start splunkweb --nodaemon