Error on Splunk Universal Forwarder Upgrade

nhurtaud · ‎05-30-2014

Hi everyone,
When we upgrade agent (6.0.2 to 6.0.3) we have a WIndows error : "1901 Error attempting to read from the source install database: C:\Windows\Installer\xxxxx.msi"
Server is WIndiows Server 2012 and is SCCM Server of PCI Compliant environment.

Have you had similar experiences ?

Thank you.

jkat54 · ‎05-07-2017

Some folks have suggested turning off antivirus tools during the install got past the 1901 error. Just google "msi 1901 server 2012 r2" for more details. This isn't a Splunk error, but a windows error.

ddrillic · ‎05-06-2017

A discussion about the 1901 error at Thread: Error 1901 or 1335

robert_miller · ‎07-16-2014

We just started seeing the same error. Were you able to resolve this?

Error on Splunk Universal Forwarder Upgrade

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Announcing Modern Navigation: A New Era of Splunk User Experience

Modernize your Splunk Apps – Introducing Python 3.13 in Splunk

Step into “Hunt the Insider: An Splunk ES Premier Mystery” to catch a cybercriminal ...

Join the Conversation

Error on Splunk Universal Forwarder Upgrade

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Announcing Modern Navigation: A New Era of Splunk User Experience

Modernize your Splunk Apps – Introducing Python 3.13 in Splunk

Step into “Hunt the Insider: An Splunk ES Premier Mystery” to catch a cybercriminal ...