Installation

Forwarder install failing using MST through group policy

Gstines
Engager

Hello all,

I'm running into an issue with installing the universal forwarder on my clients through group policy. I've attempted multiple ways with no success. Now, I've decided to use Orca to create a MST with our desired property values and push this through software installation in group policy.

I've read about the 2 advanced options, "Ignore the language when deploying and include OLE class & product info" and have made sure to have those checked under the advanced deployment options for the MSI. I run a gpupdate on the client and it says there is an install from group policy that requires a restart to install. I type y or yes and allow the restart, but when I log back in... NOTHING.

Something is hanging up and I'm not sure what? Any help would be greatly appreciated.

Labels (1)
Get Updates on the Splunk Community!

Index This | When is October more than just the tenth month?

October 2025 Edition  Hayyy Splunk Education Enthusiasts and the Eternally Curious!   We’re back with this ...

Observe and Secure All Apps with Splunk

  Join Us for Our Next Tech Talk: Observe and Secure All Apps with SplunkAs organizations continue to innovate ...

What’s New & Next in Splunk SOAR

 Security teams today are dealing with more alerts, more tools, and more pressure than ever.  Join us for an ...