<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: How to deploy a Splunk Universal Forwarder through GPO and MST setup? in Getting Data In</title>
    <link>https://community.splunk.com/t5/Getting-Data-In/How-to-deploy-a-Splunk-Universal-Forwarder-through-GPO-and-MST/m-p/213295#M41912</link>
    <description>&lt;P&gt;Is it works?&lt;BR /&gt;
Could you send me the script?&lt;/P&gt;

&lt;P&gt;Thank you!&lt;/P&gt;</description>
    <pubDate>Mon, 01 Feb 2016 20:30:48 GMT</pubDate>
    <dc:creator>tiagomiranda</dc:creator>
    <dc:date>2016-02-01T20:30:48Z</dc:date>
    <item>
      <title>How to deploy a Splunk Universal Forwarder through GPO and MST setup?</title>
      <link>https://community.splunk.com/t5/Getting-Data-In/How-to-deploy-a-Splunk-Universal-Forwarder-through-GPO-and-MST/m-p/213293#M41910</link>
      <description>&lt;P&gt;I have been trying to push the Splunk Universal Forwarder out to my client systems via GPO.  I would like, however, to generate an MST file that: &lt;BR /&gt;
a)  Accepts the EULA and &lt;BR /&gt;
b) sets a predefined Receiving Indexer.  &lt;/P&gt;

&lt;P&gt;Utilizing Orca.exe I have made attempts at MSTs with the following:&lt;/P&gt;

&lt;P&gt;Under the Property Table I assigned the Property of AGREETOLICENSE the value of Yes.  As for the receiving indexer, I tried both the following:&lt;BR /&gt;
1) Create new row in the Property table called RECEIVING_INDEXER and set the value to &lt;EM&gt;ipaddress:portnumber&lt;/EM&gt; and &lt;BR /&gt;
2) Under the AdminProperties row I modified ;RECEIVING_INDEXER; to ;RECEIVING_INDEXER=&lt;EM&gt;ipaddress:portnumber&lt;/EM&gt; neither of which seemed to work.&lt;/P&gt;

&lt;P&gt;I also made sure to go to the advanced properties on my GPO to check "Ignore language when deploying this package".&lt;/P&gt;

&lt;P&gt;Any and all help would be greatly appreciated.&lt;/P&gt;</description>
      <pubDate>Tue, 29 Sep 2020 07:45:53 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Getting-Data-In/How-to-deploy-a-Splunk-Universal-Forwarder-through-GPO-and-MST/m-p/213293#M41910</guid>
      <dc:creator>sardinha1</dc:creator>
      <dc:date>2020-09-29T07:45:53Z</dc:date>
    </item>
    <item>
      <title>Re: How to deploy a Splunk Universal Forwarder through GPO and MST setup?</title>
      <link>https://community.splunk.com/t5/Getting-Data-In/How-to-deploy-a-Splunk-Universal-Forwarder-through-GPO-and-MST/m-p/213294#M41911</link>
      <description>&lt;P&gt;Try &lt;CODE&gt;RECEIVING_INDEXER="ipaddress:portnumber"&lt;/CODE&gt;.&lt;/P&gt;

&lt;P&gt;I found when I was testing deploying it via SCCM that the quotes were important.&lt;/P&gt;</description>
      <pubDate>Thu, 05 Nov 2015 02:13:33 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Getting-Data-In/How-to-deploy-a-Splunk-Universal-Forwarder-through-GPO-and-MST/m-p/213294#M41911</guid>
      <dc:creator>Richfez</dc:creator>
      <dc:date>2015-11-05T02:13:33Z</dc:date>
    </item>
    <item>
      <title>Re: How to deploy a Splunk Universal Forwarder through GPO and MST setup?</title>
      <link>https://community.splunk.com/t5/Getting-Data-In/How-to-deploy-a-Splunk-Universal-Forwarder-through-GPO-and-MST/m-p/213295#M41912</link>
      <description>&lt;P&gt;Is it works?&lt;BR /&gt;
Could you send me the script?&lt;/P&gt;

&lt;P&gt;Thank you!&lt;/P&gt;</description>
      <pubDate>Mon, 01 Feb 2016 20:30:48 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Getting-Data-In/How-to-deploy-a-Splunk-Universal-Forwarder-through-GPO-and-MST/m-p/213295#M41912</guid>
      <dc:creator>tiagomiranda</dc:creator>
      <dc:date>2016-02-01T20:30:48Z</dc:date>
    </item>
  </channel>
</rss>

