<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: Installing Universal Forwarder from Command line and Hangs at Receiving Indexer in Splunk Search</title>
    <link>https://community.splunk.com/t5/Splunk-Search/Installing-Universal-Forwarder-from-Command-line-and-Hangs-at/m-p/194683#M56149</link>
    <description>&lt;P&gt;OK, reading this as somebody with only basic knowledge of the Windows forwarder install, it looks like you have /qn as parameters to msiexec, but I think the correct parameter to the splunkforwarder itself is /quiet according to the manuals. Could it simply be the installer wants to show you a user interface but msiexec is blocking it from doing so? Is there nothing in the logfile you specified (C:splunkinst.log)?&lt;/P&gt;

&lt;P&gt;I'm guessing you already know, but for completeness sake the manual for deploying the forwarder from the command-line can be found at &lt;A href="http://docs.splunk.com/Documentation/Splunk/latest/Forwarding/DeployaWindowsdfviathecommandline"&gt;http://docs.splunk.com/Documentation/Splunk/latest/Forwarding/DeployaWindowsdfviathecommandline&lt;/A&gt;. &lt;/P&gt;</description>
    <pubDate>Wed, 19 Mar 2014 15:16:30 GMT</pubDate>
    <dc:creator>mgbruin</dc:creator>
    <dc:date>2014-03-19T15:16:30Z</dc:date>
    <item>
      <title>Installing Universal Forwarder from Command line and Hangs at Receiving Indexer</title>
      <link>https://community.splunk.com/t5/Splunk-Search/Installing-Universal-Forwarder-from-Command-line-and-Hangs-at/m-p/194682#M56148</link>
      <description>&lt;P&gt;I am installing the UF from a command prompt for deployment via SCCM 2012 with the following command line:&lt;BR /&gt;
msiexec /i splunkforwarder-6.0.1-189883-x64-release.msi RECEIVING_INDEXER="ServerFQDN:Port" WINEVENTLOG_APP_ENABLE=1 WINEVENTLOG_SEC_ENABLE=1 WINEVENTLOG_SYS_ENABLE=1 AGREETOLICENSE=Yes /qn /lv c:\splunkinst.log&lt;BR /&gt;
and the install does not error out, but will instead just sit at the following line:&lt;BR /&gt;
***Splunk_AddReceivingIndexer: Starting Splunk_AddReceivingIndexer&lt;BR /&gt;
I've let it sit for over 24hrs.  When I run a netstat -an on the server I can see that it is listening on the port that is passed in the command line.  When I telnet from the machine I am installing to I can connect via that same port.  Anyone have any ideas as to why it just isn't proceeding?&lt;/P&gt;</description>
      <pubDate>Mon, 28 Sep 2020 16:10:44 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/Installing-Universal-Forwarder-from-Command-line-and-Hangs-at/m-p/194682#M56148</guid>
      <dc:creator>jamieralphsmith</dc:creator>
      <dc:date>2020-09-28T16:10:44Z</dc:date>
    </item>
    <item>
      <title>Re: Installing Universal Forwarder from Command line and Hangs at Receiving Indexer</title>
      <link>https://community.splunk.com/t5/Splunk-Search/Installing-Universal-Forwarder-from-Command-line-and-Hangs-at/m-p/194683#M56149</link>
      <description>&lt;P&gt;OK, reading this as somebody with only basic knowledge of the Windows forwarder install, it looks like you have /qn as parameters to msiexec, but I think the correct parameter to the splunkforwarder itself is /quiet according to the manuals. Could it simply be the installer wants to show you a user interface but msiexec is blocking it from doing so? Is there nothing in the logfile you specified (C:splunkinst.log)?&lt;/P&gt;

&lt;P&gt;I'm guessing you already know, but for completeness sake the manual for deploying the forwarder from the command-line can be found at &lt;A href="http://docs.splunk.com/Documentation/Splunk/latest/Forwarding/DeployaWindowsdfviathecommandline"&gt;http://docs.splunk.com/Documentation/Splunk/latest/Forwarding/DeployaWindowsdfviathecommandline&lt;/A&gt;. &lt;/P&gt;</description>
      <pubDate>Wed, 19 Mar 2014 15:16:30 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/Installing-Universal-Forwarder-from-Command-line-and-Hangs-at/m-p/194683#M56149</guid>
      <dc:creator>mgbruin</dc:creator>
      <dc:date>2014-03-19T15:16:30Z</dc:date>
    </item>
    <item>
      <title>Re: Installing Universal Forwarder from Command line and Hangs at Receiving Indexer</title>
      <link>https://community.splunk.com/t5/Splunk-Search/Installing-Universal-Forwarder-from-Command-line-and-Hangs-at/m-p/194684#M56150</link>
      <description>&lt;P&gt;I did try to run the install with the /quiet switch and received the same results (no interface popped up either).  The log file shows no errors or even warnings up to that point.&lt;/P&gt;</description>
      <pubDate>Wed, 19 Mar 2014 15:35:06 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/Installing-Universal-Forwarder-from-Command-line-and-Hangs-at/m-p/194684#M56150</guid>
      <dc:creator>jamieralphsmith</dc:creator>
      <dc:date>2014-03-19T15:35:06Z</dc:date>
    </item>
    <item>
      <title>Re: Installing Universal Forwarder from Command line and Hangs at Receiving Indexer</title>
      <link>https://community.splunk.com/t5/Splunk-Search/Installing-Universal-Forwarder-from-Command-line-and-Hangs-at/m-p/194685#M56151</link>
      <description>&lt;P&gt;I did try to run the install with the /quiet switch and received the same results (no interface popped up either).  The log file shows no errors or even warnings up to that point.&lt;/P&gt;</description>
      <pubDate>Wed, 19 Mar 2014 15:35:33 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/Installing-Universal-Forwarder-from-Command-line-and-Hangs-at/m-p/194685#M56151</guid>
      <dc:creator>jamieralphsmith</dc:creator>
      <dc:date>2014-03-19T15:35:33Z</dc:date>
    </item>
  </channel>
</rss>

