When I supply the domain name I  get invalid account on the dialog box prompting for this information.  I assumed this field for the account name did not like a slash in the name so I continued without it because it went on to the next screen without it.  I assumed incorrectly again that if I'm using the same account to log into the computer that I'm using in this field for the install, it would know I'm a member of that domain.  What I just tested was adding .local to the end of the domain name and worked.  Thank you for finding the solution.  Funny on how some things you do in windows only need the domain name while others need the TLD extension as well such as in this case. ... View more

MSI (s) (A8!58) [08:34:26:146]: Closing MSIHANDLE (279) of type 790531 for thread 6232 MSI (s) (A8:E4) [08:34:26:161]: Closing MSIHANDLE (259) of type 790536 for thread 5160 MSI (s) (A8:28) [08:34:26:161]: Executing op: ActionStart(Name=SetupServiceConfig,,) Action 8:34:26: SetupServiceConfig. MSI (s) (A8:28) [08:34:26:161]: Executing op: CustomActionSchedule(Action=SetupServiceConfig,ActionType=11265,Source=BinaryData,Target=**********,CustomActionData=**********) MSI (s) (A8:28) [08:34:26:161]: Creating MSIHANDLE (280) of type 790536 for thread 5160 MSI (s) (A8:24) [08:34:26:161]: Invoking remote custom action. DLL: C:\Windows\Installer\MSI6F52.tmp, Entrypoint: SetupServiceConfigCA MSI (s) (A8!68) [08:34:26:286]: Creating MSIHANDLE (281) of type 790531 for thread 3176 SetupServiceConfig: Warning: Invalid property ignored: EnableApp=. MSI (s) (A8!68) [08:34:26:286]: Closing MSIHANDLE (281) of type 790531 for thread 3176 MSI (s) (A8!68) [08:34:26:286]: Creating MSIHANDLE (282) of type 790531 for thread 3176 SetupServiceConfig: Warning: Invalid property ignored: FailCA=. MSI (s) (A8!68) [08:34:26:286]: Closing MSIHANDLE (282) of type 790531 for thread 3176 MSI (s) (A8!68) [08:34:26:286]: Creating MSIHANDLE (283) of type 790531 for thread 3176 SetupServiceConfig: Error: ChangeServiceConfig failed 0x421 MSI (s) (A8!68) [08:34:26:286]: Closing MSIHANDLE (283) of type 790531 for thread 3176 MSI (s) (A8!68) [08:34:26:286]: Creating MSIHANDLE (284) of type 790531 for thread 3176 SetupServiceConfig: Error 0x80004005: Cannot setup splunkd service. MSI (s) (A8!68) [08:34:26:286]: Closing MSIHANDLE (284) of type 790531 for thread 3176 CustomAction SetupServiceConfig returned actual error code 1603 (note this may not be 100% accurate if translation happened inside sandbox) MSI (s) (A8:24) [08:34:26:286]: Closing MSIHANDLE (280) of type 790536 for thread 5160 Action ended 8:34:26: InstallFinalize. Return value 3. ... View more

Changed to 12 CPU's and 16GB memory.  Same issue.  I think its a permission issue but the logs are not telling me much. ... View more

first_install.log contains 4 lines that just list the version, build, product and platform.  Its Windows Server 2019.  The VM  has 4 CPU and 24GB of memory. ... View more