Installation

Forwarder install failing using MST through group policy

Gstines
Engager

Hello all,

I'm running into an issue with installing the universal forwarder on my clients through group policy. I've attempted multiple ways with no success. Now, I've decided to use Orca to create a MST with our desired property values and push this through software installation in group policy.

I've read about the 2 advanced options, "Ignore the language when deploying and include OLE class & product info" and have made sure to have those checked under the advanced deployment options for the MSI. I run a gpupdate on the client and it says there is an install from group policy that requires a restart to install. I type y or yes and allow the restart, but when I log back in... NOTHING.

Something is hanging up and I'm not sure what? Any help would be greatly appreciated.

Labels (1)
Get Updates on the Splunk Community!

Splunk Decoded: Service Maps vs Service Analyzer Tree View vs Flow Maps

It’s Monday morning, and your phone is buzzing with alert escalations – your customer-facing portal is running ...

What’s New in Splunk Observability – September 2025

What's NewWe are excited to announce the latest enhancements to Splunk Observability, designed to help ITOps ...

Fun with Regular Expression - multiples of nine

Fun with Regular Expression - multiples of nineThis challenge was first posted on Slack #regex channel ...