Getting Data In

How do I edit my code for a universal forwarder silent installation on Windows via CLI?

timospringer
New Member

Hello,

This is my code for installing and updating the UniversalForwarder via the command line.

msiexec.exe /i "\\splunkforwarder-6.2.4-271043-x64-release.msi" AGREETOLICENSE=Yes /quiet

This works perfectly fine for installing and updating the forwarder.
However, it doesn't work when the same version of the UniversalForwarder is already installed. After executing, I can't even find the UniversalForwarder in my Program Files.

Does anyone know how to optimize the code?

0 Karma

JensT
Communicator

Hi,

seems like you want a forced install.
There are several options. Check:
https://technet.microsoft.com/en-us/library/cc759262(v=ws.10).aspx
https://support.microsoft.com/en-us/kb/227091

Regards,
Jens

0 Karma

timospringer
New Member

Hi Jens,

thank you for your answer! It solved one problem, but made another. 😉

My problem is, that this command doesn't work when the UniversalForwarder isn't installed on the machine.
I need a script where the Forwarder is installed when it's not on the machine but doesn't make problems when it's already installed.

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

How much can you really learn in 3 minutes?

Observability can certainly be hard to understand – there's a lot of jargon and buzzwords and it seems to ...

Event Series: The Agentic SOC: Trust Before Autonomy

AI is fundamentally changing security operations, but true progress requires more than just automation—it ...

Free Professional Services for .conf26 Attendees

This year at .conf26, we are doing something a little different. We are bringing the best minds from ...