I am doing an upgrade of Enterprise Security from 3.3.1 to 4.0 through the GUI. I installed the app by providing it the file, then started the "Post-Install Configuration". It moves through the first two steps rather quickly, then seems hung up on "Disabling apps prior to installation".
I have 26 "messages" in the alert window, most of them are similar to the following:
> User admin triggered the 'disable' action on app 'SA-NetworkProtection', and the following objects required a restart: distsearch, indexes
and then the following 2 specific messages:
> Unable to initialize modular input "es_deployment_manager" defined inside the app "SplunkEnterpriseSecuritySuite": Introspecting scheme=es_deployment_manager: script running failed (exited with code 1).> Splunk must be restarted for changes to take effect. Click here to restart from the Manager.
Not sure what is specifically causing it to hang. Any tips on where to look or has anyone seen this similar issue?
↧