Encounter errors when installing Splunk forwarder on Windows 2003 DC

Hi,

I have to reinstall Splunk on a different drive(from C:\ to D:) on our Windows 2003 domain controller.

When I tried to install again I've encountered these errors:
1)
Splunk installer was unable to enable Windows App
Splunk exicode = '2'

I closed it,it continues and encountered the 2nd error:
2)
Splunk installer was unable to start Splunk services
Please make sure you have provided the correct username and/or password,and the user you are trying to run Splunk as has the correct privileges. Exicode='1'

I've checked sevices.msc and splunkd and splunkweb are listed, but unable to start.

I have tried to install using the domain administrator account,and a user account that was given administrator privileges but both unsuccessful.

Now even when I tried to uninstall Splunk,splunkd and splunkweb doesn't get removed from services.msc, even after a reboot of the server.

asked 08 Oct '10, 04:22

remy06
277●23
accept rate: 40%

Did you uninstall Splunk cleanly before attempting to install again?

(08 Oct '10, 13:11) ftk ♦

Splunk does not require a reboot to uninstall if Im not wrong.I simply uninstall the previous version of Splunk at C:, before I attempt to install it again on D:\

(11 Oct '10, 01:55) remy06

4 Answers:

oldest newest most voted

0	Am not sure what went wrong here. But I've tested and started using WMI alternative to pull events from this server instead. link answered 21 Oct '10, 04:04 remy06 277●23 accept rate: 40%

SO do this:

1) Start > Run > services.msc 2) Find Splunkd 3) Right Click properties 4) Go to Log-on Tab 5) Re-fill in the: This Account Information 6) Click Apply 7) Click Ok 8) Start the 2 splunk services after allowing log-on services.

link

answered 03 Feb '11, 19:59

jlford30
11●1
accept rate: 0%

0	Having the same issue. I even logged into the server with the newly created splunk service account with Domain Admin priv and still have this message. Exitcode = 4 Any remedies? link answered 03 Feb '11, 19:42 jlford30 11●1 accept rate: 0%

0	thanks u so much !!! link answered 25 Mar '11, 03:24 ngoctuanqn 1 accept rate: 0%

Post your answer

toggle preview

Follow this question

Email:

RSS:

Answers

Answers + Comments

Markdown Basics

*italic* or _italic_
**bold** or __bold__
link:[text](http://url.com/ "Title")
image?![alt text](/path/img.jpg "Title")
numbered list: 1. Foo 2. Bar
to add a line break simply add two spaces to where you would like the new line to be.
basic HTML tags are also supported

learn more about Markdown

Tags:

forwarder ×407
windows ×303
error ×221
installation ×92
install ×21

Asked: 08 Oct '10, 04:22

Seen: 1,428 times

Last updated: 25 Mar '11, 03:24

Encounter errors when installing Splunk forwarder on Windows 2003 DC

Follow this question

Splunk Resources

Related questions