Getting Data In

How to troubleshoot why our command to install a Splunk Forwarder via CLI for Windows Firewall is no longer working?

CaptainHook
Communicator

We have been running msiexec.exe /i "c:\SFTPRoot\splunkforwarder-x.x.x-xxxx-x64-release.msi" AGREETOLICENSE=Yes /quiet to install a Splunk forwarder on our firewall servers that do not have RDP access; However, of recent, we are running into an issue where this command is not working anymore and we are not receiving any indication as to why it fails.

Does anyone have experience with doing this type of restricted install and/or Windows command line ideas?

Thank you in advance.

0 Karma

bsachitano
Explorer

Add logging to your command to see why it's failing.

Try running:

msiexec.exe /i "c:\SFTPRoot\splunkforwarder-x.x.x-xxxx-x64-release.msi" /L C:\logfile.txt

Then evaluate the file.

0 Karma

CaptainHook
Communicator

I had since tried that by running this:

msiexec.exe /i "C:\Users\srvHPOM\Downloads\ splunkforwarder-x.x.x-xxxx-x64-release.msi" /L*V C:\Users\srvHPOM\Downloads\myinstall.log" AGREETOLICENSE=Yes 

It was unsuccessful and wrote a log with 0b.

0 Karma

bsachitano
Explorer

OK, Try this to see if it writes a log.:

msiexec.exe /i "splunkforwarder-x.x.x-xxxxx-x64-release.msi" ALLUSERS=1 /qn /norestart /log output.log AGREETOLICENSE=Yes

I had issues with several machines when using an auto-deployer like SCCM or PDQ Deply. I got back messages saying the product was already deployed, when it really wasn't.

0 Karma

CaptainHook
Communicator

Thank you very much. I will try this when I get a moment today and let you know.

0 Karma

sloshburch
Splunk Employee
Splunk Employee

Any luck?

0 Karma
Get Updates on the Splunk Community!

Database Performance Sidebar Panel Now on APM Database Query Performance & Service ...

We’ve streamlined the troubleshooting experience for database-related service issues by adding a database ...

IM Landing Page Filter - Now Available

We’ve added the capability for you to filter across the summary details on the main Infrastructure Monitoring ...

Dynamic Links from Alerts to IM Navigators - New in Observability Cloud

Splunk continues to improve the troubleshooting experience in Observability Cloud with this latest enhancement ...