I am facing the same issue, i am the admin of my system, tried to install multiple times but it rollsback, Can some one guide me "or you cannot write Program Files to add Splunk" means and how can it be resolved It rolls back at very last of the installation process, almost after 90-95% of completion Log file details 11-19-2017 01:51:41.318 +0530 INFO loader - Running utility: "validatedb" 11-19-2017 01:51:41.490 +0530 INFO loader - Getting configuration data from: D:\etc\myinstall\splunkd.xml 11-19-2017 01:51:41.492 +0530 INFO loader - SPLUNK_MODULE_PATH environment variable not found - defaulting to D:\etc\modules 11-19-2017 01:51:41.493 +0530 INFO loader - loading modules from D:\etc\modules 11-19-2017 01:51:41.603 +0530 INFO loader - Writing out composite configuration file: D:\var\run\splunk\composite.xml 11-19-2017 01:51:41.743 +0530 INFO loader - Validated 8 indexes in 94.00 milliseconds 11-19-2017 01:51:43.009 +0530 INFO ServerConfig - Found no hostname options in server.conf. Will attempt to use default for now. 11-19-2017 01:51:43.010 +0530 INFO ServerConfig - Host name option is "". 11-19-2017 01:51:55.444 +0530 INFO loader - Running utility: "check-transforms-keys" 11-19-2017 01:51:55.451 +0530 INFO loader - Getting configuration data from: D:\etc\myinstall\splunkd.xml 11-19-2017 01:51:55.453 +0530 INFO loader - SPLUNK_MODULE_PATH environment variable not found - defaulting to D:\etc\modules 11-19-2017 01:51:55.454 +0530 INFO loader - loading modules from D:\etc\modules 11-19-2017 01:51:55.494 +0530 INFO loader - Writing out composite configuration file: D:\var\run\splunk\composite.xml ... View more