Getting Data In

Why i am getting "Splunk enterprise wizard eended prematurely , your system has not been modified "

ratulbose
New Member

While installing Splunk in my desktop i am getting the error like "Splunk enterprise wizard ended prematurely because of an error. You system has not been modified ". I am using Windows 7 64Bit in my desktop. I even tried with 6.3 release.

Please let us know the issue and how to rectify it. .

Tags (2)
0 Karma

deepashri_123
Motivator

Hey@ratulbose,

You can refer some suggestions from this answer:
https://answers.splunk.com/answers/373532/why-am-i-getting-error-splunk-enterprise-setup-wiz-3.html

Let me know if this helps!!

0 Karma

jhornsby_splunk
Splunk Employee
Splunk Employee

Hi!

Try rerunning the installer with logging enabled from an elevated command prompt like so:

msiexec /i  /l*vx msiexec.log

You can then search in this log for "Return value 3.", and whatever is logged just prior to this should tell you what the problem is.

Cheers,

- Jo.

Get Updates on the Splunk Community!

Stay Connected: Your Guide to May Tech Talks, Office Hours, and Webinars!

Take a look below to explore our upcoming Community Office Hours, Tech Talks, and Webinars this month. This ...

They're back! Join the SplunkTrust and MVP at .conf24

With our highly anticipated annual conference, .conf, comes the fez-wearers you can trust! The SplunkTrust, as ...

Enterprise Security Content Update (ESCU) | New Releases

Last month, the Splunk Threat Research Team had two releases of new security content via the Enterprise ...