Installation

How to deploy a Windows universal forwarder via the command line?

Mark_Barrett
Explorer

I'm trying to make a batch file to install Universal Forwarder on our servers. The batch file is able to get the .MSI file to launch, but it seems to ignore all the flags and it acts the same as I were to double-click on the .MSI for manual installation. The first thing I see is the install program asking me to click Next, and then it asks to Agree to the license - even though I specifically included the flag to have this done automatically.
I've already successfully run a manual install on another server which is nearly identical to this one. The account being used to run the install has full Admin rights to the box, so there shouldn't be any rights issues.
Here is my batch file command:
msiexec.exe /i splunkforwarder-4.3.4-136012-x64-release.msi AGREETOLICENSE=Yes RECEIVING_INDEXER="serverxxx" LAUNCHSPLUNK=1 WINEVENTLOG_APP_ENABLE=1 WINEVENTLOG_SYS_ENABLE=1

Labels (2)
0 Karma

dheinz
New Member

I'm attempting to install the msi via batch file using the following and it just opens the command line switch box??

msiexec.exe /i splunkforwarder-6.3.0-aa7d4b1ccb80-x64-release.msi AGREETOLICENSE=Yes LOGON_USERNAME=”MYDOMAIN\splunkagent” LOGON_PASSWORD="password” DEPLOYMENT_SERVER="00.00.000.00:0000” LAUNCHSPLUNK=1

0 Karma

neklov_splunk
Splunk Employee
Splunk Employee

Hi,
I think you have forgot the quiet flag, look at this example:
msiexec.exe /i splunkuniversalforwarder_x86.msi RECEIVING_INDEXER="indexer1:9997" WINEVENTLOG_SEC_ENABLE=1 WINEVENTLOG_SYS_ENABLE=1 AGREETOLICENSE=Yes /quiet
The quiet flag will enable an unattended installation of the MSI package.

Mark_Barrett
Explorer

Actually I tried the /QUIET flag first (before submitting this question without /quiet).
With /QUIET the install starts/ends in less than 1 second, no files/folders created locally and no new services started.

dheinz
New Member

I'm attempting to install the msi via batch file using the following and it just opens the command line switch box??

msiexec.exe /i splunkforwarder-6.3.0-aa7d4b1ccb80-x64-release.msi AGREETOLICENSE=Yes LOGON_USERNAME=”MYDOMAIN\splunkagent” LOGON_PASSWORD="password” DEPLOYMENT_SERVER="00.00.000.00:0000” LAUNCHSPLUNK=1

0 Karma
Get Updates on the Splunk Community!

What's new in Splunk Cloud Platform 9.1.2312?

Hi Splunky people! We are excited to share the newest updates in Splunk Cloud Platform 9.1.2312! Analysts can ...

What’s New in Splunk Security Essentials 3.8.0?

Splunk Security Essentials (SSE) is an app that can amplify the power of your existing Splunk Cloud Platform, ...

Let’s Get You Certified – Vegas-Style at .conf24

Are you ready to level up your Splunk game? Then, let’s get you certified live at .conf24 – our annual user ...