Getting Data In

Deployment Problems with SCCM

LiquidTension
Path Finder

I am currently testing deployment of the universal forwarder. The end goal is to have it on all windows computers so they are ready to pull data from a deployment server when I enable them to (we are taking a phased approach to rollout).

What I am seeing is if I run the installation manually from a server directly with

msiexec.exe /q ALLUSERS=2 /m MSIASQSH /i "splunkforwarder-5.0.2-149561-x64-release.msi" DEPLOYMENT_SERVER="Myserver:8089" AGREETOLICENSE=Yes

everything works fine and the deploymentclient.conf file appears. If I use those switches with the MSI through an SCCM deployment everything installs but it does not create the deploymentclient.conf file.

Has anybody else experienced this? I would prefer not to have to push a bat file containing switches.

0 Karma
1 Solution

LiquidTension
Path Finder

I dug deeper and discovered that the server that was being used for testing already had a universal forwarder on it...Doh! Package does exactly what it is supposed to in that case. When pushed to a Windows server that did not already have the Universal forwarder, everything worked.

View solution in original post

0 Karma

LiquidTension
Path Finder

I dug deeper and discovered that the server that was being used for testing already had a universal forwarder on it...Doh! Package does exactly what it is supposed to in that case. When pushed to a Windows server that did not already have the Universal forwarder, everything worked.

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Unlocking Unified Insights: New Gigamon Federated Search App for Splunk

In today’s data-heavy environment, organizations are caught in a data distribution dilemma. As data volumes ...

GA: New Data Management App in Splunk Platform

Streamlining Data Management: Introducing a unified experience in Splunk Managing data at scale shouldn’t feel ...

Announcing Modern Navigation: A New Era of Splunk User Experience

We are excited to introduce the Modern Navigation feature in the Splunk Platform, available to both cloud and ...