Installation

Splunk Universal Forwarder upgrade to 9.1.3 is failing with Copy Error "Setup can not copy the file SplunkMonitor NoHan

vksplunk1
Explorer

Splunk Universal Forwarder upgrade to 9.1.3 is failing with Copy Error "Setup can not copy the file SplunkMonitor NoHandleDrv.sys".  Attached the error messageWIndowsError.PNG

Labels (3)
0 Karma

marnall
Motivator

There is a known issue where version 9.1.3 is unable to be installed or upgraded to: https://docs.splunk.com/Documentation/Forwarder/9.1.3/Forwarder/KnownIssues

Could you try the suggested workaround:


Install UF while passing the following feature flag:

msiexec.exe /i $SPLUNK_MSI_PACKAGE USE_LOCAL_SYSTEM=1

0 Karma
Get Updates on the Splunk Community!

Index This | Why did the turkey cross the road?

November 2025 Edition  Hayyy Splunk Education Enthusiasts and the Eternally Curious!   We’re back with this ...

Enter the Agentic Era with Splunk AI Assistant for SPL 1.4

  🚀 Your data just got a serious AI upgrade — are you ready? Say hello to the Agentic Era with the ...

Feel the Splunk Love: Real Stories from Real Customers

Hello Splunk Community,    What’s the best part of hearing how our customers use Splunk? Easy: the positive ...