I'm trying to upgrade splunk to the version 6.2 on windows 7 64 bits, it performed a "rollback action" during which I got the message : " splunk Enterprise setup wizard ended prematurely because of an error. Your system has not been modified... "
when i write splunk status on CLI i got the message : "splunkd : unable to obtain status".
Any help please ?? Thanks
If your Windows is English then you don't have the same problem. Install with verbose logging and open a new question for your problem:
msiexec /I splunkfile /l*v logfile
Hi, Same here with French Windows 2012 R2 edition, 6.2 install/upgrade is broken. (not the stopping service issue)
A maintenance release seems quickly required for foreign people running Spunk in Windows
There are two issue mixed in this single splunkAnswer. One is an issue with non-english language base OS, and the other is with stopping splunk services before upgrade.
This is a known issue mentioned here and the work around is to stop splunkd service and splunkweb service manually before upgrade. http://answers.splunk.com/answers/176994/upgrade-to-62-fails-on-windows-7-with-error-while.html
Note that the short cut after upgrade may not work , and you may need to directly use your browser for connecting to splunk UI.
@martin_mueller: Could you elaborate a little over the root cause.
I seem to get something about a trust relationship being broken between the primary domain and the trust domain. My translation might not be right, as this log is written in danish.
See my comment from five days ago on the question itself - localized Administrators group names flummox the installer.
Feel free to post Danish logs, reading that is fine for me - less than 100km to the border 🙂