Getting Data In

Deployment Problems with SCCM

LiquidTension
Path Finder

I am currently testing deployment of the universal forwarder. The end goal is to have it on all windows computers so they are ready to pull data from a deployment server when I enable them to (we are taking a phased approach to rollout).

What I am seeing is if I run the installation manually from a server directly with

msiexec.exe /q ALLUSERS=2 /m MSIASQSH /i "splunkforwarder-5.0.2-149561-x64-release.msi" DEPLOYMENT_SERVER="Myserver:8089" AGREETOLICENSE=Yes

everything works fine and the deploymentclient.conf file appears. If I use those switches with the MSI through an SCCM deployment everything installs but it does not create the deploymentclient.conf file.

Has anybody else experienced this? I would prefer not to have to push a bat file containing switches.

0 Karma
1 Solution

LiquidTension
Path Finder

I dug deeper and discovered that the server that was being used for testing already had a universal forwarder on it...Doh! Package does exactly what it is supposed to in that case. When pushed to a Windows server that did not already have the Universal forwarder, everything worked.

View solution in original post

0 Karma

LiquidTension
Path Finder

I dug deeper and discovered that the server that was being used for testing already had a universal forwarder on it...Doh! Package does exactly what it is supposed to in that case. When pushed to a Windows server that did not already have the Universal forwarder, everything worked.

0 Karma
Get Updates on the Splunk Community!

The OpenTelemetry Certified Associate (OTCA) Exam

What’s this OTCA exam? The Linux Foundation offers the OpenTelemetry Certified Associate (OTCA) credential to ...

From Manual to Agentic: Level Up Your SOC at Cisco Live

Welcome to the Era of the Agentic SOC   Are you tired of being a manual alert responder? The security ...

Splunk Classroom Chronicles: Training Tales and Testimonials (Episode 4)

Welcome back to Splunk Classroom Chronicles, our ongoing series where we shine a light on what really happens ...