Installation

LsaLogonUser error

thorneja
Explorer

I'm getting a LsaLogonUser error: 0xc0000062 during the install after i enter the Splunk user and password. How do I get past this?

0 Karma
1 Solution

thorneja
Explorer

Solved it. I installed it from the command line with the launchsplunk=0 flag and let it install with the Local System account. Then I changed the log on account for the splunkd and splunkweb services before starting them.

View solution in original post

0 Karma

thorneja
Explorer

Solved it. I installed it from the command line with the launchsplunk=0 flag and let it install with the Local System account. Then I changed the log on account for the splunkd and splunkweb services before starting them.

0 Karma

thorneja
Explorer

Yes, I created an account, splunkadmin, and entered it there with the password. I'll be pulling logs from other servers and the documentation said this was necessary.

0 Karma

somesoni2
Revered Legend

Are you entering admin/changeme or any other account?

0 Karma

thorneja
Explorer

Don't think that will help. I'm just at the beginning of the install where it asks what user will run Splunk.

0 Karma

somesoni2
Revered Legend
0 Karma
Get Updates on the Splunk Community!

Introducing the Splunk Community Dashboard Challenge!

Welcome to Splunk Community Dashboard Challenge! This is your chance to showcase your skills in creating ...

Built-in Service Level Objectives Management to Bridge the Gap Between Service & ...

Wednesday, May 29, 2024  |  11AM PST / 2PM ESTRegister now and join us to learn more about how you can ...

Get Your Exclusive Splunk Certified Cybersecurity Defense Engineer Certification at ...

We’re excited to announce a new Splunk certification exam being released at .conf24! If you’re headed to Vegas ...