Monitoring Splunk

Trouble Installing Splunk-6.0 on Windows-7 64-bit

rogue_carrot
Communicator

Hello Team Splunk!

I am trying to install Splunk 6 on a Windows 7 Professional Operating System (64-bit). I was able to install this version of splunk but the splunkd service never starts. I receive the following error message, Figure 1, when installing splunk-6.0-182037-x64-release.msi:
alt text
Figure 1: Error installing splunk-6.0 - service did not start

I thought maybe I could try to trouble shoot this error and Google around. This lead me to a post where the solution was to start the Service from the Windows "Administration Tools". One can get to this tool by clicking "Control Panel" -> "System and Security" -> "Administration Tools". From here click on "Services". When I go to the "Services" and right-click "Splunkd" and select "Start" the services does not start. 😕

I thought I would try starting the services from the bin directory but receive another error saying that Splunkd cannot be started because of a timeout error. Figure 2 below shows the output of running a splunk start command.
alt text
Figure 2: Splunkd fails to start from command prompt

Finally, when I try to log into the web page I receive a 500 error. I think this 500 Internal Server Error is related to the Splunkd service not running. Is this correct?

Also, I would try to use the latest version of Splunk but I am using Windows 7 OS so this is not an option. I did try to install but the installation simply rolled itself back after the program figured out something would not work.

Thank-you for taking the time to read this!

UPDATE

I re-installed the software for the 4th time and it worked this time for whatever reason. First, I tried 6.0 64 bit version of Splunk, then I was told to install the latest version by someone here at work and that did not work. Next I installed the 6.4 64-bit version of Splunk. After this failure I then I tried 6.0 32-bit version of Splunk. Finally, I tried Splunk 6.0 64-bit this morning and the software worked! 🙂 The splunkd service started with no problems. The web interface works and now I am working on creating a report instead of working on how to install the software! 🙂

Thank-you for the comments and suggestions everyone. The moral support is appreciated.

0 Karma
1 Solution

rogue_carrot
Communicator

I re-installed the software for the 4th time and it worked this time for whatever reason.

First, I tried 6.0 64 bit version of Splunk, then I was told to install the latest version by someone here at work and that did not work. Next, I installed the 6.4 64-bit version of Splunk. After this failure I then tried 6.0 32-bit version of Splunk. Finally, I tried Splunk 6.0 64-bit this morning and the software worked! 🙂 The splunkd service started with no problems, Figure 1 shows this. The web interface works and now I am working on creating a report instead of working on how to install the software! 🙂
alt text
Figure 1: Splunkd service running - Windows7 64 Bit

Thank-you for the comments and suggestions everyone. The moral support is appreciated.

View solution in original post

0 Karma

rogue_carrot
Communicator

I re-installed the software for the 4th time and it worked this time for whatever reason.

First, I tried 6.0 64 bit version of Splunk, then I was told to install the latest version by someone here at work and that did not work. Next, I installed the 6.4 64-bit version of Splunk. After this failure I then tried 6.0 32-bit version of Splunk. Finally, I tried Splunk 6.0 64-bit this morning and the software worked! 🙂 The splunkd service started with no problems, Figure 1 shows this. The web interface works and now I am working on creating a report instead of working on how to install the software! 🙂
alt text
Figure 1: Splunkd service running - Windows7 64 Bit

Thank-you for the comments and suggestions everyone. The moral support is appreciated.

0 Karma

adonio
Ultra Champion

do you install it as system user or domain user? check your permissions.
remove splunk completely (uninstall from control panel) and re-install

rogue_carrot
Communicator

I install as the 'system user' I think because I am installing locally not on a domain.

What permissions do I check and how do I check these on Windows? I know on Linux I could just 'ls -lh' a directory to find permissions but I am using Windows unfortunately.

Also, I have tried to re-install multiple times and I receive the same error with splunk-6 32 bit and splunk-6 64 bit.

I am uninstalling from the control panel. 🙂

Thank-you for the comment adonio. 😉 I will try and try again...

0 Karma

xpac
SplunkTrust
SplunkTrust

Did you take a look at the splunkd.log? It should be in $yourinstallfolder/var/log/splunk/. If you can't find it or there is zero information in it from the time you tried to start it, you are most likely looking at a permissions issue...

0 Karma

jkat54
SplunkTrust
SplunkTrust

Instead of updating your question with the answer, can you please post your solution as an answer and then we can mark as THE answer?

Thanks in advance!

0 Karma

rogue_carrot
Communicator

Well, I did not think it was an answer really. I did not do anything to get splunkd service to work. I just re-installed. Maybe this is a solution though...

Also, you are welcome.

0 Karma

jkat54
SplunkTrust
SplunkTrust

Well I won’t argue that with you for sure... i guess I was thinking you were satisfied with how you got it working, but I wouldn’t call it a solution so much as a work around.

If you want to keep troubleshooting, we’re happy to keep replying!

0 Karma

jkat54
SplunkTrust
SplunkTrust

When you run the installer for splunk it should create a temp folder in c:\temp. Or maybe in your users local application data folders...

There’s a log file in there that’s incredibly useful for troubleshooting installs, but it’s erased by the msi when it exits. So you gotta run the msi, wait for the failure, leave the failure dialogue up, go look for the msi installer log and read the last few lines for the error with the installer.

0 Karma

rogue_carrot
Communicator

Wow, interesting. I will have to try this next time. I was very impressed when the installer found out that the installation would not work in some situations and then rolled the installation back; and showed the progress bar going in reverse. I have never seen the progress bar go in reverse before. That is a cool idea.

0 Karma
Get Updates on the Splunk Community!

Index This | I am a number, but when you add ‘G’ to me, I go away. What number am I?

March 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...

What’s New in Splunk App for PCI Compliance 5.3.1?

The Splunk App for PCI Compliance allows customers to extend the power of their existing Splunk solution with ...

Extending Observability Content to Splunk Cloud

Register to join us !   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to ...