Getting Data In

Universal Forwarder 6.0 and 6.0.1 - Install to collect Remote Windows Data

dbylertbg
Path Finder

When running splunkforwarder-6.0.1-189883-x64-release.msi or splunkforwarder-6.0-182611-x64-release.msi and choosing to collect "Remote Windows Data", I get an error message: "Please re-launch the installer as an Administrator. This is required to configure the installation for remote data collection."

Steps to reproduce:

  1. Download splunkforwarder-6.0.1-189883-x64-release.msi or splunkforwarder-6.0-182611-x64-release.msi
  2. Launch splunkforwarder-6.0.1-189883-x64-release.msi or splunkforwarder-6.0-182611-x64-release.msi.
  3. Accept all defaults or enter appropriate values for 'Destination Folder', 'Specify a Deployment Server', 'Specify Receiving Indexer' pages.
  4. For the 'Let us test the credentials before continuing' page, select the "Remote Windows Data" option.
  5. Click 'Next' and fill out the fields as appropriate. Click 'Next' and you will get the error message "Please re-launch the installer as an Administrator. This is required to configure the installation for remote data collection."

I have tested this on Windows Server 2012 as well as Windows 7 Pro. On the Windows Server 2012 server I was logged in as a domain administrator. On the windows 7 Pro computer I was logged in as a local administrator. Either way I always get this error message and cannot install either of the 6.0 releases of the universal forwarder set to collect 'remote windows data'.

Any ideas?

0 Karma

rmsit
Communicator

I having similar issues installing the 6.0.1 universal forwarder for Windows Server 2008 R2 64bit. The install process hangs, doesn't even matter which options you select. The prior version (6.0) did not have this issue.

0 Karma

jrhoops
Engager

I launched an elevated command prompt and then launched the msi from that command prompt to get around this issue. I was unable to right-click run as administrator directly on the msi from the gui.

dbylertbg
Path Finder

Looks like this is the fix. I'll contact the docs team to get them to make a note in the docs about this.

0 Karma

dbylertbg
Path Finder

Turned of UAC, attempted installation: got the same error message.

0 Karma

antlefebvre
Communicator

Is UAC enabled? Try turning it off if it is.

0 Karma
Get Updates on the Splunk Community!

Improve Your Security Posture

Watch NowImprove Your Security PostureCustomers are at the center of everything we do at Splunk and security ...

Maximize the Value from Microsoft Defender with Splunk

 Watch NowJoin Splunk and Sens Consulting for this Security Edition Tech TalkWho should attend:  Security ...

This Week's Community Digest - Splunk Community Happenings [6.27.22]

Get the latest news and updates from the Splunk Community here! News From Splunk Answers ✍️ Splunk Answers is ...