Getting Data In

Error while installing Splunk forwarder in windows system

indudhar
Engager

I am installing 7.0.13.1 UF Agent but I am receiving above error...

In Windows server 2012 R2 64 bit Universal forwarder setup wizard ended prematurely because of an error. Your system has not been modified. To install this program at a later time, run Setup wizard again. Click the finish button to exit the setup Wizard

Could anyone please help me on this..

Best Regards,
Indudhar

0 Karma

jhornsby_splunk
Splunk Employee
Splunk Employee

Hi @indudhar,

I'm afraid we'll need logs to troubleshoot further. You can enable logging like so:
msiexec /l*vx msiexec.log /i <splunk.msi>
If you then search for return value 3 in that log, what happened immediately beforehand is the culprit.

Good luck!

Cheers,

- Jo.

0 Karma
Get Updates on the Splunk Community!

What the End of Support for Splunk Add-on Builder Means for You

Hello Splunk Community! We want to share an important update regarding the future of the Splunk Add-on Builder ...

Solve, Learn, Repeat: New Puzzle Channel Now Live

Welcome to the Splunk Puzzle PlaygroundIf you are anything like me, you love to solve problems, and what ...

Building Reliable Asset and Identity Frameworks in Splunk ES

 Accurate asset and identity resolution is the backbone of security operations. Without it, alerts are ...