Getting Data In

What is the windows universal forwarder product Id?

chandanghoshCTL
Explorer

Any one know the product id for UF 7.0.1 ?

i have this for 665

Package Splunk665
{

Ensure = Present

        Path        = "C:\Software\splunkforwarder-6.6.5-b119a2a8b0ad-x64-release.msi" 
        Name        = "UniversalForwarder"
        ProductId   = "9D47FB24-B169-437D-9D8B-F0CC951644D7"
        Arguments   = "AGREETOLICENSE=Yes /quiet"
    }
0 Karma
1 Solution

adonio
Ultra Champion

hello there,
i think that what you refer to as ProductId is the guid of the forwarder.
each forwarder (or splunk install) has a unique guid regardless of its version
hope it helps

View solution in original post

0 Karma

adonio
Ultra Champion

hello there,
i think that what you refer to as ProductId is the guid of the forwarder.
each forwarder (or splunk install) has a unique guid regardless of its version
hope it helps

0 Karma

chandanghoshCTL
Explorer

thanks yes i was looking for that value , my college help me , i did a install splunk uf in a box so from PowerShell we can run this
get-wmiobject Win32_Product | Format-Table IdentifyingNumber, Name, LocalPackage -AutoSize | findstr Universal

or regedit , search Splunk or Universal under productlcon the value c:\Windows\Installer{xxxx}\WixSplunklcon

0 Karma

adonio
Ultra Champion

good, if you find the solution, please mark your question as answered.
you can up vote helpful comments if you wish

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Data Management Digest – August 2026

MichelleCorpora_1-1788182384472.png Welcome to the August 2026 edition of Data Management Digest! August was a ...

Your Feedback. Our Roadmap. Visit the PX Feedback Booth at .conf26

You use Splunk every day, come and help shape what's next.  Save Your Seat: Product-Focused Sessions at ...

Agentic SOC Triage: Investigating Splunk ES Notables with MCP Server and a Local LLM

The Problem: Too Many Alerts, Too Little Context Security operations teams running Splunk Enterprise Security ...