Join the Conversation
- Find Answers
- :
- Splunk Administration
- :
- Getting Data In
- :
- Re: Universal Forwarder 6.0 and 6.0.1 - Install to...
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark Topic
- Subscribe to Topic
- Mute Topic
- Printer Friendly Page
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Universal Forwarder 6.0 and 6.0.1 - Install to collect Remote Windows Data
When running splunkforwarder-6.0.1-189883-x64-release.msi or splunkforwarder-6.0-182611-x64-release.msi and choosing to collect "Remote Windows Data", I get an error message: "Please re-launch the installer as an Administrator. This is required to configure the installation for remote data collection."
Steps to reproduce:
- Download splunkforwarder-6.0.1-189883-x64-release.msi or splunkforwarder-6.0-182611-x64-release.msi
- Launch splunkforwarder-6.0.1-189883-x64-release.msi or splunkforwarder-6.0-182611-x64-release.msi.
- Accept all defaults or enter appropriate values for 'Destination Folder', 'Specify a Deployment Server', 'Specify Receiving Indexer' pages.
- For the 'Let us test the credentials before continuing' page, select the "Remote Windows Data" option.
- Click 'Next' and fill out the fields as appropriate. Click 'Next' and you will get the error message "Please re-launch the installer as an Administrator. This is required to configure the installation for remote data collection."
I have tested this on Windows Server 2012 as well as Windows 7 Pro. On the Windows Server 2012 server I was logged in as a domain administrator. On the windows 7 Pro computer I was logged in as a local administrator. Either way I always get this error message and cannot install either of the 6.0 releases of the universal forwarder set to collect 'remote windows data'.
Any ideas?
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
I having similar issues installing the 6.0.1 universal forwarder for Windows Server 2008 R2 64bit. The install process hangs, doesn't even matter which options you select. The prior version (6.0) did not have this issue.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
I launched an elevated command prompt and then launched the msi from that command prompt to get around this issue. I was unable to right-click run as administrator directly on the msi from the gui.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Looks like this is the fix. I'll contact the docs team to get them to make a note in the docs about this.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Turned of UAC, attempted installation: got the same error message.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Is UAC enabled? Try turning it off if it is.
Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!
Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.
Announcing Modern Navigation: A New Era of Splunk User Experience
Modernize your Splunk Apps – Introducing Python 3.13 in Splunk
Step into “Hunt the Insider: An Splunk ES Premier Mystery” to catch a cybercriminal ...
