The Error Message on the screen isenter code here: "UniversalForwarder Setup ended prematurely"
Versions older than 6.2 (e.g. 6.1.3) of Splunk Universal Forwarder and Splunk Enterprise (and other applications) can be installed without problems.
Since SSLv3 has been disabled in our environment, the older versions do not deliver any data and cannot be used.
As I can see in the MSI Installer log splunk has problems getting installed version:
Action start 16:49:22: GetPreviousSettings.
GetPreviousSettings: Error 0x80004005: Failed to get lookup product code.
Also tried to install as administrator from CMD-Line
Consulted Development to see if any of the keys in the branch that you had exported were in a non-standard format (as this affects the ability for the Splunk installer to complete the installation).
When upgrading a Universal Forwarder or Splunk Enterprise if the hexadecimal value after HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Products is not 32 hexadecimal characters the Splunk installer will report an error. It performs this check as part of the upgrade.
In the example below, there is a rogue character _.