Getting Data In

Splunk 7.0 installation failed to complete

freedg
Engager

I am upgrading to Splunk 7.0. The installer hangs and does not complete.
Running Win10 1703 on vmware 12

looking for help

DanielASG
Explorer

i had the same issue with splunk 6.6.3

the issue was a windows registry key blocking it

so windows thinks its already installed

you need to find the registry key and remove it and it will work

0 Karma

freedg
Engager

It turns out that 6.6 and 7.0 would not install. I added IIS components to win10 and it finally installed and would run.
thank you for your help!!

0 Karma

jhornsby
Splunk Employee
Splunk Employee

Hi,

To assist further we're going to need an Installer log. The command to use is:
msiexec /i splunk.msi /l*vx msiexec.log

If you can get us a copy of the resulting msiexec.log, and also %TEMP%\splunk.log (if it exists), hopefully we'll be able to determine what is going on.

Cheers,

- Jo.

0 Karma

kevinmanson
Explorer

Same problem here. Below is the end of the splunk log file from TEMP. the last error before removing is DS init failed: Deployment Server not available on a dedicated forwarder

Successfully processed 31 files; Failed processing 0 files
HTTP/1.1 200 OK
Date: Thu, 28 Sep 2017 14:49:38 GMT
Expires: Thu, 26 Oct 1978 00:00:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, max-age=0
Content-Type: text/xml; charset=UTF-8
X-Content-Type-Options: nosniff
Content-Length: 1930
Connection: Close
X-Frame-Options: SAMEORIGIN
Server: Splunkd

/services/apps/local
2017-09-28T10:49:38-04:00

<name>Splunk</name>

0
30
0

<s:msg type="INFO">Restart required by: default-mode, limits, server, web</s:msg>

DS init failed: Deployment Server not available on a dedicated forwarder.
Removing service SplunkForwarder
Service removed
Disabled.

0 Karma

jhornsby
Splunk Employee
Splunk Employee

Hi kevinmanson,

Is this also 7.0? And are you specifying a Deployment Server?

Cheers,

- Jo.

0 Karma
Get Updates on the Splunk Community!

Stay Connected: Your Guide to May Tech Talks, Office Hours, and Webinars!

Take a look below to explore our upcoming Community Office Hours, Tech Talks, and Webinars this month. This ...

They're back! Join the SplunkTrust and MVP at .conf24

With our highly anticipated annual conference, .conf, comes the fez-wearers you can trust! The SplunkTrust, as ...

Enterprise Security Content Update (ESCU) | New Releases

Last month, the Splunk Threat Research Team had two releases of new security content via the Enterprise ...