Splunk® Enterprise

Installation Manual

Download manual as PDF

This documentation does not apply to the most recent version of Splunk. Click here for the latest version.
Download topic as PDF

Correct the user selected during Windows installation

If you have selected "other user" during the Splunk Enterprise installation, and that user does not exist or perhaps you mistyped the information, you can go into the Windows Service Control Manager and specify the correct information, as long as you have not started Splunk yet. If you have started Splunk, you must stop it, uninstall it and reinstall it.

If you specified an invalid user during the Windows GUI installation process, you will see two popup error windows.

To change the user:

1. In Control Panel > Administrative Tools > Services, find the splunkd and splunkweb services. You'll notice that they are not started and are currently owned by the Local System User.

2. Right click on each service and choose Properties. The properties dialog for that service is displayed.

3. Select the Log On tab.

4. Select the This account radio button and fill in the correct domain\username and password.

5. Click Apply.

6. Click OK.

7. Repeat Steps 2 through 6 for the second service (you must do this for both splunkd and splunkweb).

8. You can now either start both services from the Service Manager or from the Splunk command line interface.

Install on Windows via the command line
Install on Linux

This documentation applies to the following versions of Splunk® Enterprise: 6.0, 6.0.1, 6.0.2, 6.0.3, 6.0.4, 6.0.5, 6.0.6, 6.0.7, 6.0.8, 6.0.9, 6.0.10, 6.0.11, 6.0.12, 6.0.13, 6.0.14, 6.0.15, 6.1, 6.1.1, 6.1.2, 6.1.3, 6.1.4, 6.1.5, 6.1.6, 6.1.7, 6.1.8, 6.1.9, 6.1.10, 6.1.11, 6.1.12, 6.1.13, 6.1.14


Hi Zymeworks,

It is if you run Splunk Enterprise in legacy mode. Otherwise, it isn't. I'll update the page to make the distinction.

Thanks for the heads up.

March 18, 2015

Is step 7 still relevant ? In the description for splunkweb service, it says that spunkweb is deprecated as of 6.2

March 4, 2015

Was this documentation topic helpful?

Enter your email address, and someone from the documentation team will respond to you:

Please provide your comments here. Ask a question or make a suggestion.

You must be logged into splunk.com in order to post comments. Log in now.

Please try to keep this discussion focused on the content covered in this documentation topic. If you have a more general question about Splunk functionality or are experiencing a difficulty with Splunk, consider posting a question to Splunkbase Answers.

0 out of 1000 Characters