Getting Data In

Error while installing Splunk forwarder in windows system


I am installing UF Agent but I am receiving above error...

In Windows server 2012 R2 64 bit Universal forwarder setup wizard ended prematurely because of an error. Your system has not been modified. To install this program at a later time, run Setup wizard again. Click the finish button to exit the setup Wizard

Could anyone please help me on this..

Best Regards,

0 Karma

Splunk Employee
Splunk Employee

Hi @indudhar,

I'm afraid we'll need logs to troubleshoot further. You can enable logging like so:
msiexec /l*vx msiexec.log /i <splunk.msi>
If you then search for return value 3 in that log, what happened immediately beforehand is the culprit.

Good luck!


- Jo.

0 Karma
State of Splunk Careers

Access the Splunk Careers Report to see real data that shows how Splunk mastery increases your value and job satisfaction.

Find out what your skills are worth!