When running splunkforwarder-6.0.1-189883-x64-release.msi you get an error message -Please re-launch the installer as an Administrator. This is required to configure the installation for remote data collection.

[rbal_splunk]

When running splunkforwarder-6.0.1-189883-x64-release.msi you get an error message "Please re-launch the installer as an Administrator. This is required to configure the installation for remote data collection."

[rbal_splunk]

When installing Splunk to run as Not Local system (e.g. domain account), the installer needed to query the security subsystem to determine if the named account was an admin or not – this is requirement in Splunk.

In order to query the security subsystem, one has to be an admin.

Enhancement request has been logged, id non-admin account is executing the Splunk installation , Splunk installer should toss a pop-up and asked them to re-run the installer with admin privs. Bug#SPL-80908:Windows installer fails to execute if the user running it doesn't have sufficient privileges.