Getting Data In

Error while installing Splunk forwarder in windows system

indudhar
Engager

I am installing 7.0.13.1 UF Agent but I am receiving above error...

In Windows server 2012 R2 64 bit Universal forwarder setup wizard ended prematurely because of an error. Your system has not been modified. To install this program at a later time, run Setup wizard again. Click the finish button to exit the setup Wizard

Could anyone please help me on this..

Best Regards,
Indudhar

0 Karma

jhornsby_splunk
Splunk Employee
Splunk Employee

Hi @indudhar,

I'm afraid we'll need logs to troubleshoot further. You can enable logging like so:
msiexec /l*vx msiexec.log /i <splunk.msi>
If you then search for return value 3 in that log, what happened immediately beforehand is the culprit.

Good luck!

Cheers,

- Jo.

0 Karma
Get Updates on the Splunk Community!

Hunt Smarter, Not Harder: Discover New SPL “Recipes” in Our Threat Hunting Webinar

Are you ready to take your threat hunting skills to the next level? As Splunk community members, you know the ...

Splunk ITSI & Correlated Network Visibility

  Now On Demand   Take Your Network Visibility to the Next Level In today’s complex IT environments, ...

Community Content Calendar, August edition

In the dynamic world of cybersecurity, staying ahead means constantly solving new puzzles and optimizing your ...