Are you a member of the Splunk Community?
- Find Answers
- :
- Splunk Administration
- :
- Admin Other
- :
- Installation
- :
- How to deploy a Windows universal forwarder via th...
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark Topic
- Subscribe to Topic
- Mute Topic
- Printer Friendly Page
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
How to deploy a Windows universal forwarder via the command line?
I'm trying to make a batch file to install Universal Forwarder on our servers. The batch file is able to get the .MSI file to launch, but it seems to ignore all the flags and it acts the same as I were to double-click on the .MSI for manual installation. The first thing I see is the install program asking me to click Next, and then it asks to Agree to the license - even though I specifically included the flag to have this done automatically.
I've already successfully run a manual install on another server which is nearly identical to this one. The account being used to run the install has full Admin rights to the box, so there shouldn't be any rights issues.
Here is my batch file command:
msiexec.exe /i splunkforwarder-4.3.4-136012-x64-release.msi AGREETOLICENSE=Yes RECEIVING_INDEXER="serverxxx" LAUNCHSPLUNK=1 WINEVENTLOG_APP_ENABLE=1 WINEVENTLOG_SYS_ENABLE=1
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
I'm attempting to install the msi via batch file using the following and it just opens the command line switch box??
msiexec.exe /i splunkforwarder-6.3.0-aa7d4b1ccb80-x64-release.msi AGREETOLICENSE=Yes LOGON_USERNAME=”MYDOMAIN\splunkagent” LOGON_PASSWORD="password” DEPLOYMENT_SERVER="00.00.000.00:0000” LAUNCHSPLUNK=1
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hi,
I think you have forgot the quiet flag, look at this example:
msiexec.exe /i splunkuniversalforwarder_x86.msi RECEIVING_INDEXER="indexer1:9997" WINEVENTLOG_SEC_ENABLE=1 WINEVENTLOG_SYS_ENABLE=1 AGREETOLICENSE=Yes /quiet
The quiet flag will enable an unattended installation of the MSI package.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Actually I tried the /QUIET flag first (before submitting this question without /quiet).
With /QUIET the install starts/ends in less than 1 second, no files/folders created locally and no new services started.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
I'm attempting to install the msi via batch file using the following and it just opens the command line switch box??
msiexec.exe /i splunkforwarder-6.3.0-aa7d4b1ccb80-x64-release.msi AGREETOLICENSE=Yes LOGON_USERNAME=”MYDOMAIN\splunkagent” LOGON_PASSWORD="password” DEPLOYMENT_SERVER="00.00.000.00:0000” LAUNCHSPLUNK=1
Splunk AI Assistant for SPL vs. ChatGPT: Which One is Better?
Data Persistence in the OpenTelemetry Collector
Thanks for the Memories! Splunk University, .conf25, and our Community
