Getting Data In

Unable to install universal forwarder on Windows Server 2008

christinmb
Path Finder

Im trying to install the universal forwarder in my windows server 2008 witht the remote windows data option but I keep getting the error:
Splunk Installer was unable to start Splunk Services.
Please make sure you have provided the correct username and/or password, and the user you are trying to run Splunk has the correct privileges. Exitcode='4'

And if I try to use the Splunk web and enter the Active Directory in the data inputs I get this error: Unable to open the selected path. Path doesnt exist or access is denied. and I was wondering if any of you knows why Im getting this errors.

0 Karma
1 Solution

christinmb
Path Finder

Yes, it has admin privileges, thanks anyway. Already fixed it

View solution in original post

0 Karma

christinmb
Path Finder

Yes, it has admin privileges, thanks anyway. Already fixed it

0 Karma

christinmb
Path Finder

The remote event logs collection was because my splunkD service was working as a local account, the issue corrected when I entered a domain account in the "Log on" option in the SplunkD service. The other issue I don't know how to fix it, I was doing the installation for remote windows data and should be local.

0 Karma

rovechkin_splun
Splunk Employee
Splunk Employee

what was the issue then?

0 Karma

rovechkin_splun
Splunk Employee
Splunk Employee

Is your user has admin privileges on the box where UF is installed? here is the link with required privileges:
http://docs.splunk.com/Documentation/Splunk/latest/Installation/InstallonWindows

Get Updates on the Splunk Community!

Index This | I am a number, but when you add ‘G’ to me, I go away. What number am I?

March 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...

What’s New in Splunk App for PCI Compliance 5.3.1?

The Splunk App for PCI Compliance allows customers to extend the power of their existing Splunk solution with ...

Extending Observability Content to Splunk Cloud

Register to join us !   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to ...