This is the command run as a ps1 script pushed out by Airwatch: msiexec.exe /i C:\Windows\Temp\splunk\splunkforwarder-8.0.6-152fb4b2bb96-x64-release.msi RECEIVING_INDEXER="<indexer>" WINEVENTLOG_SEC_ENABLE=1 WINEVENTLOG_SYS_ENABLE=1 MONITOR_PATH=“C:\Program Files\osquery\logs\osqueryd.results.log” MONITOR_PATH=“C:\ProgramData\Airwatch\UnifiedAgent\logs\” AGREETOLICENSE=Yes /quiet. It fails but Airwatch gives no clue as to why. The script can be run from cmd prompt as admin and it executes as expected. When run from powershell cmd locally or through Airwatch this pops up on the remote endpoint.
Has something changed in the last few days to make this happen? This install has been working for quite a while. Some windows updates?
