msiexec /i splunkforwarder-6.3.4-x64.msi /lv C:\tmp\splunkInstall.log
Below is entire log, wont let me attach files yet.
=== Logging started: 6/13/2016 14:33:45 ===
Action 14:33:45: INSTALL.
Action start 14:33:45: INSTALL.
Action 14:33:45: SetAllUsers.
Action start 14:33:45: SetAllUsers.
SetAllUsers: Info: Registry setting for current user is not found.
SetAllUsers: Info: ALLUSERS value for the existing installation: -1.
SetAllUsers: Info: Set ALLUSERS property to 1.
SetAllUsers: Info: Leave SetAllUsers: 0x0.
Action ended 14:33:45: SetAllUsers. Return value 1.
Action 14:33:45: FindRelatedProducts. Searching for related applications
Action start 14:33:45: FindRelatedProducts.
Action ended 14:33:45: FindRelatedProducts. Return value 1.
Action 14:33:45: GetPreviousSettings.
Action start 14:33:45: GetPreviousSettings.
GetPreviousSettings: Info: no installed splunk products found
GetPreviousSettings: Info: Leave GetPreviousSettings: 0x0.
Action ended 14:33:45: GetPreviousSettings. Return value 1.
Action 14:33:45: CheckSupportedOs.
Action start 14:33:45: CheckSupportedOs.
Action ended 14:33:45: CheckSupportedOs. Return value 1.
Action 14:33:45: PrepareDlg.
Action start 14:33:45: PrepareDlg.
Info 2898.For WixUI_Font_Normal textstyle, the system created a 'Tahoma' font, in 0 character set, of 13 pixels height.
Info 2898.For WixUI_Font_Bigger textstyle, the system created a 'Tahoma' font, in 0 character set, of 19 pixels height.
Action 14:33:45: PrepareDlg. Dialog created
Action ended 14:33:45: PrepareDlg. Return value 1.
Action 14:33:45: AppSearch. Searching for installed applications
Action start 14:33:45: AppSearch.
Action ended 14:33:45: AppSearch. Return value 0.
Action 14:33:45: ValidateProductID.
Action start 14:33:45: ValidateProductID.
Action ended 14:33:45: ValidateProductID. Return value 1.
Action 14:33:45: CostInitialize. Computing space requirements
Action start 14:33:45: CostInitialize.
Action ended 14:33:45: CostInitialize. Return value 1.
Action 14:33:45: FileCost. Computing space requirements
Action start 14:33:45: FileCost.
Action ended 14:33:45: FileCost. Return value 1.
Action 14:33:45: CostFinalize. Computing space requirements
Action start 14:33:45: CostFinalize.
Action ended 14:33:45: CostFinalize. Return value 1.
Action 14:33:45: UFInstallDlg.
Action start 14:33:45: UFInstallDlg.
Info 2898.For WixUI_Font_Title textstyle, the system created a 'Tahoma' font, in 0 character set, of 14 pixels height.
Action 14:33:45: UFInstallDlg. Dialog created
Info 2898.For SplunkUI_Font_Bold textstyle, the system created a 'Tahoma' font, in 0 character set, of 13 pixels height.
Info 2898.For SplunkUI_Font_Italic textstyle, the system created a 'Tahoma' font, in 0 character set, of 13 pixels height.
Action 14:33:48: DeplSrvIdxDlg. Dialog created
Action 14:33:49: ValidateAndSetDeplSrvParams.
Action start 14:33:49: ValidateAndSetDeplSrvParams.
Action ended 14:33:49: ValidateAndSetDeplSrvParams. Return value 1.
Action 14:33:49: RecvIdxDlg. Dialog created
Action 14:33:50: ValidateAndSetRecvIdxParams.
Action start 14:33:50: ValidateAndSetRecvIdxParams.
Action ended 14:33:50: ValidateAndSetRecvIdxParams. Return value 1.
Action 14:33:50: UFWarnDlg. Dialog created
Action 14:33:51: UFVerifyReadyDlg. Dialog created
Action ended 14:33:52: UFInstallDlg. Return value 1.
Action 14:33:52: ProgressDlg.
Action start 14:33:52: ProgressDlg.
Action 14:33:52: ProgressDlg. Dialog created
Action ended 14:33:52: ProgressDlg. Return value 1.
Action 14:33:52: ProgressDlg1.
Action start 14:33:52: ProgressDlg1.
Action 14:33:52: ProgressDlg1. Dialog created
Action ended 14:33:52: ProgressDlg1. Return value 1.
Action 14:33:52: ExecuteAction.
Action start 14:33:52: ExecuteAction.
Action ended 14:33:53: ExecuteAction. Return value 3.
Action 14:33:53: FatalError.
Action start 14:33:53: FatalError.
Action 14:33:53: FatalError. Dialog created
Action ended 14:33:54: FatalError. Return value 2.
Action ended 14:33:54: INSTALL. Return value 3.
Property(C): UpgradeCode = {64B13631-6664-4F23-AFE2-98FCE86920BD}
Property(C): SET_ADMIN_USER = 1
Property(C): UILicenseAgreement = 1
Property(C): InstallFlow = 1
Property(C): INSTALLDIR = C:\Program Files\SplunkUniversalForwarder\
Property(C): dirA5528701EE26FFBF346CCE20EE8ACE99 = C:\Program Files\SplunkUniversalForwarder\bin\
Property(C): dirE99B67BA83CA9B283DA87308D2AB32C0 = C:\Program Files\SplunkUniversalForwarder\bin\scripts\
Property(C): dir3E02976F57563947ADB6A8038DF4FCEF = C:\Program Files\SplunkUniversalForwarder\etc\
Property(C): dirFB7FAFCA28F7419DE35973B35C5D283E = C:\Program Files\SplunkUniversalForwarder\etc\apps\introspection_generator_addon\bin\
Property(C): dirA4925C017BDFD103F37D0BDE702E9C43 = C:\Program Files\SplunkUniversalForwarder\etc\apps\introspection_generator_addon\default\
Property(C): dir7C2F815EE2C9E7DBE85066CF5B056987 = C:\Program Files\SplunkUniversalForwarder\etc\apps\learned\default\
Property(C): dir28F70AA0D15CA730061DB84FFE88D805 = C:\Program Files\SplunkUniversalForwarder\etc\apps\learned\metadata\
Property(C): dir0ABBB45398994B5C89841ED05851776C = C:\Program Files\SplunkUniversalForwarder\etc\apps\search\default\
Property(C): dir66FC566CEF189328CCCC8589311D2503 = C:\Program Files\SplunkUniversalForwarder\etc\apps\search\metadata\
Property(C): dir2D2122E4CFDE8C263EEE7452554D6DA2 = C:\Program Files\SplunkUniversalForwarder\etc\apps\SplunkUniversalForwarder\default\
Property(C): dirF389DCA026B8D0A2E829970DE12F66F0 = C:\Program Files\SplunkUniversalForwarder\etc\apps\SplunkUniversalForwarder\metadata\
Property(C): dirD4A311E40878FB05D111541A6F077C82 = C:\Program Files\SplunkUniversalForwarder\etc\apps\splunk_httpinput\default\
Property(C): dir2A81299A0652E91159BE1994DD92316A = C:\Program Files\SplunkUniversalForwarder\etc\auth\
Property(C): dir67189055EBCF5D1437F0A9D30368ED9C = C:\Program Files\SplunkUniversalForwarder\etc\deployment-apps\
Property(C): dirA6241AC9F2CFDD1D7D4327FB5A124C92 = C:\Program Files\SplunkUniversalForwarder\etc\disabled-apps\
Property(C): dir96D85E5B4631FB954D7A2F05F344C017 = C:\Program Files\SplunkUniversalForwarder\etc\licenses\forwarder\
Property(C): dir3F2ED1881D5C561B698B737D96419537 = C:\Program Files\SplunkUniversalForwarder\etc\modules\input\exec\
Property(C): dir3C58D8B9DB7081CC9C009A2FA233FFFD = C:\Program Files\SplunkUniversalForwarder\etc\modules\input\fschangemanager\
Property(C): dir623F2857FD6CE56C0C7472F3CF4B157E = C:\Program Files\SplunkUniversalForwarder\etc\modules\input\structuredparsing\
Property(C): dirAAE2EA6FF6BFF3615E0F6ECB4F8B8317 = C:\Program Files\SplunkUniversalForwarder\etc\modules\input\tailfile\
Property(C): dir40C5047ABE9F85BC416CF37384338C22 = C:\Program Files\SplunkUniversalForwarder\etc\modules\input\TCP\
Property(C): dir500C5AB468B41B12914CAFC92914BB04 = C:\Program Files\SplunkUniversalForwarder\etc\modules\input\UDP\
Property(C): dir350E86D3D8394619D5C56BE268AB8C03 = C:\Program Files\SplunkUniversalForwarder\etc\modules\input\wineventlog\
Property(C): dir08A71AA8240CE634F2916BD8FD86AE9D = C:\Program Files\SplunkUniversalForwarder\etc\modules\input\winparsing\
Property(C): dir36980B38D75840D0DF3C22965AFE352F = C:\Program Files\SplunkUniversalForwarder\etc\modules\parsing\
Property(C): dirEA4E77DDDE1ED87692CD92A2F7477FDA = C:\Program Files\SplunkUniversalForwarder\etc\myinstall\
Property(C): dir62FE35BBE7BD45CAEAB9D4261B2C1DA9 = C:\Program Files\SplunkUniversalForwarder\etc\shcluster\apps\
Property(C): dir7A9E1C63375946BEF53B8BCD2F9EB32B = C:\Program Files\SplunkUniversalForwarder\etc\shcluster\users\
Property(C): dir5320F257A67DB36A4CED85E00FC63DD0 = C:\Program Files\SplunkUniversalForwarder\etc\system\bin\
Property(C): dirBAC85229BB4A3494F5ECCB42AA1B824B = C:\Program Files\SplunkUniversalForwarder\etc\system\default\
Property(C): dirD3351CCE95594E87E2CC36C1024B5B4C = C:\Program Files\SplunkUniversalForwarder\etc\system\local\
Property(C): dir858D19BEE324185B277CA79FFC48EDEE = C:\Program Files\SplunkUniversalForwarder\etc\system\metadata\
Property(C): dir5083584ADFC4261D3780F7B66CB3B7B3 = C:\Program Files\SplunkUniversalForwarder\etc\system\README\
Property(C): dir087F918F10A120B6907E2460F0868A49 = C:\Program Files\SplunkUniversalForwarder\etc\system\static\
Property(C): dirCC4BF51C3FB0120CE9B785729700549B = C:\Program Files\SplunkUniversalForwarder\lib\
Property(C): dir9777D8246D1EFF4BCE1BBB3725F54761 = C:\Program Files\SplunkUniversalForwarder\share\
Property(C): dirD3369B4CFA7BF6DCB57584A7F452CA0A = C:\Program Files\SplunkUniversalForwarder\share\splunk\
Property(C): dir9DF6D6597089BA01028EE58CBBF75736 = C:\Program Files\SplunkUniversalForwarder\share\splunk\3rdparty\
Property(C): WixUIRMOption = UseRM
Property(C): _UICertFile = UICertFile
Property(C): _UIRootCertFile = UIRootCertFile
Property(C): UIMonPath = MONITOR_PATH
Property(C): UIUseLocalSystem = 1
Property(C): UIUseBundledTA = 1
Property(C): _UIWinTAPath = UIWinTAPath
Property(C): WIXUI_INSTALLDIR = INSTALLDIR
Property(C): ALLUSERS = 1
Property(C): ARPNOMODIFY = yes
Property(C): ProgramFiles64Folder = C:\Program Files\
Property(C): TARGETDIR = E:\
Property(C): SourceDir = C:\TEMP\
Property(C): dirFB744D04EDFDCD8AF58A1449ABBAD45F = C:\Program Files\SplunkUniversalForwarder\etc\apps\introspection_generator_addon\
Property(C): dirB06939592AE1B7F84A5F1802888016F6 = C:\Program Files\SplunkUniversalForwarder\etc\apps\
Property(C): dir1ACCD951EA5C77FB92B36E8AB9382509 = C:\Program Files\SplunkUniversalForwarder\etc\apps\learned\
Property(C): dir302A0E4D0E8A28D4161D5640B55896DC = C:\Program Files\SplunkUniversalForwarder\etc\apps\search\
Property(C): dir060491FD1B1F02D6FE725F0B7611F71E = C:\Program Files\SplunkUniversalForwarder\etc\apps\SplunkUniversalForwarder\
Property(C): dir37D95D2E12ED679D75C8A0AC58D0D14E = C:\Program Files\SplunkUniversalForwarder\etc\apps\splunk_httpinput\
Property(C): dir5D12D44E1DF9B11CFF5F78F3431780DE = C:\Program Files\SplunkUniversalForwarder\etc\licenses\
Property(C): dir4B3ADB252806E43AB420F8399AC61D45 = C:\Program Files\SplunkUniversalForwarder\etc\modules\input\
Property(C): dir613AD2632481811E0F84C80F31F4CD56 = C:\Program Files\SplunkUniversalForwarder\etc\modules\
Property(C): dir6EEC3061DFBF56B9D6D2F8CBEC90FE26 = C:\Program Files\SplunkUniversalForwarder\etc\shcluster\
Property(C): dirCFB1DCA36329665F066AABF5013AECA9 = C:\Program Files\SplunkUniversalForwarder\etc\system\
Property(C): Manufacturer = Splunk, Inc.
Property(C): ProductCode = {29032975-1994-4E51-9C9D-A2C545E735B9}
Property(C): ProductLanguage = 1033
Property(C): ProductName = UniversalForwarder
Property(C): ProductVersion = 6.3.4.0
Property(C): ARPPRODUCTICON = WixSplunkIcon
Property(C): DefaultUIFont = WixUI_Font_Normal
Property(C): WixUI_Mode = InstallDir
Property(C): ErrorDialog = ErrorDlg
Property(C): SplunkSvcName = SplunkForwarder
Property(C): UIShowTADialog = 0
Property(C): UIRecvIdxValid = 1
Property(C): DoNotInstallDrivers = 0
Property(C): SplunkX86Msi = 0
Property(C): UICustomize = 2
Property(C): AGREETOLICENSE = Yes
Property(C): LAUNCHSPLUNK = 1
Property(C): WINDOWS_TA_VERSION = 475
Property(C): os_OK = 1
Property(C): MSIRESTARTMANAGERCONTROL = Disable
Property(C): MSIDISABLERMRESTART = 1
Property(C): MSIRMSHUTDOWN = 2
Property(C): LEGACYDRV = 1
Property(C): AdminProperties = AGREETOLICENSE;CERTFILE;CERTPASSWORD;CLONEPREP;DEPLOYMENT_SERVER;DoNotInstallDrivers;ENABLEADMON;FAILCA;FORCEINSTALLDRIVERS;KEEPSPLUNKHOME;LAUNCHSPLUNK;LEGACYDRV;LOGON_PASSWORD;LOGON_USERNAME;MONITOR_PATH;NEWERVERSIONDETECTED;os_OK;OtherSplunkProductsPresent;PERFMON;PREVPRODUCTCODE;RECEIVING_INDEXER;ROOTCACERTFILE;SameProdCodeExists;SET_ADMIN_USER;SPLUNKD_PORT;SPLUNKPASSWORD;UIAdmon;UIApplicationLog;UICertFile;UICertPassword;UIConfirmCertPassword;UIConfirmDomainPassword;UIDeplSrv;UIDeplSrvPort;UIDomainAccount;UIDomainPassword;UIForwardedEventsLog;UIMonPath;UINoDeplSrvOrIndexer;UIPerfCpu;UIPerfDisk;UIPerfMemory;UIPerfNetstat;UIRecvIdx;UIRecvIdxPort;UIRootCertFile;UISecurityLog;UISetupLog;UISystemLog;UIWinTAPath;WINDOWS_TA_LOCATION;WINDOWS_TA_VERSION;WINEVENTLOG_APP_ENABLE;WINEVENTLOG_FWD_ENABLE;WINEVENTLOG_SEC_ENABLE;WINEVENTLOG_SET_ENABLE;WINEVENTLOG_SYS_ENABLE
Property(C): SecureCustomProperties = ARPNOMODIFY;NEWERVERSIONDETECTED;PREVPRODUCTCODE
Property(C): MsiHiddenProperties = LOGON_PASSWORD;SetSplunkPassword;SetupServiceConfig;SPLUNKPASSWORD
Property(C): MsiLogFileLocation = C:\splunkinstall.log
Property(C): PackageCode = {D865729F-B407-4D79-96B4-309E18136C57}
Property(C): ProductState = -1
Property(C): PackagecodeChanging = 1
Property(C): CURRENTDIRECTORY = C:\TEMP
Property(C): CLIENTUILEVEL = 0
Property(C): CLIENTPROCESSID = 7996
Property(C): MsiSystemRebootPending = 1
Property(C): VersionDatabase = 200
Property(C): VersionMsi = 5.00
Property(C): VersionNT = 601
Property(C): VersionNT64 = 601
Property(C): WindowsBuild = 7601
Property(C): ServicePackLevel = 1
Property(C): ServicePackLevelMinor = 0
Property(C): MsiNTProductType = 3
Property(C): MsiNTSuiteEnterprise = 1
Property(C): WindowsFolder = C:\Windows\
Property(C): WindowsVolume = C:\
Property(C): System64Folder = C:\Windows\system32\
Property(C): SystemFolder = C:\Windows\SysWOW64\
Property(C): RemoteAdminTS = 1
Property(C): TempFolder = C:\Users\ADMINI~1\AppData\Local\Temp\5\
Property(C): ProgramFilesFolder = C:\Program Files (x86)\
Property(C): CommonFilesFolder = C:\Program Files (x86)\Common Files\
Property(C): CommonFiles64Folder = C:\Program Files\Common Files\
Property(C): AppDataFolder = C:\Users\Administrator\AppData\Roaming\
Property(C): FavoritesFolder = C:\Users\Administrator\Favorites\
Property(C): NetHoodFolder = C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Network Shortcuts\
Property(C): PersonalFolder = C:\Users\Administrator\Documents\
Property(C): PrintHoodFolder = C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Printer Shortcuts\
Property(C): RecentFolder = C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\
Property(C): SendToFolder = C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\SendTo\
Property(C): TemplateFolder = C:\ProgramData\Microsoft\Windows\Templates\
Property(C): CommonAppDataFolder = C:\ProgramData\
Property(C): LocalAppDataFolder = C:\Users\Administrator\AppData\Local\
Property(C): MyPicturesFolder = C:\Users\Administrator\Pictures\
Property(C): AdminToolsFolder = C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\
Property(C): StartupFolder = C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\
Property(C): ProgramMenuFolder = C:\ProgramData\Microsoft\Windows\Start Menu\Programs\
Property(C): StartMenuFolder = C:\ProgramData\Microsoft\Windows\Start Menu\
Property(C): DesktopFolder = C:\Users\Public\Desktop\
Property(C): FontsFolder = C:\Windows\Fonts\
Property(C): GPTSupport = 1
Property(C): OLEAdvtSupport = 1
Property(C): ShellAdvtSupport = 1
Property(C): MsiAMD64 = 6
Property(C): Msix64 = 6
Property(C): Intel = 6
Property(C): PhysicalMemory = 147446
Property(C): VirtualMemory = 133799
Property(C): AdminUser = 1
Property(C): MsiTrueAdminUser = 1
Property(C): LogonUser = xAdministrator
Property(C): UserSID = S-1-5-21-2865489601-3508374689-3744283199-500
Property(C): UserLanguageID = 1033
Property(C): ComputerName = VATERIAMVDS201
Property(C): SystemLanguageID = 1033
Property(C): ScreenX = 1664
Property(C): ScreenY = 1034
Property(C): CaptionHeight = 19
Property(C): BorderTop = 1
Property(C): BorderSide = 1
Property(C): TextHeight = 16
Property(C): TextInternalLeading = 3
Property(C): ColorBits = 16
Property(C): TTCSupport = 1
Property(C): Time = 14:33:54
Property(C): Date = 6/13/2016
Property(C): MsiNetAssemblySupport = 4.0.30319.34209
Property(C): MsiWin32AssemblySupport = 6.1.7601.17514
Property(C): RedirectedDllSupport = 2
Property(C): MsiRunningElevated = 1
Property(C): Privileged = 1
Property(C): USERNAME = Windows User
Property(C): DATABASE = C:\TEMP\splunkforwarder-6.3.4-x64.msi
Property(C): OriginalDatabase = C:\TEMP\splunkforwarder-6.3.4-x64.msi
Property(C): SOURCEDIR = C:\TEMP\
Property(C): VersionHandler = 5.00
Property(C): UILevel = 5
Property(C): ACTION = INSTALL
Property(C): EXECUTEACTION = INSTALL
Property(C): ROOTDRIVE = E:\
Property(C): CostingComplete = 1
Property(C): OutOfDiskSpace = 0
Property(C): OutOfNoRbDiskSpace = 0
Property(C): PrimaryVolumeSpaceAvailable = 0
Property(C): PrimaryVolumeSpaceRequired = 0
Property(C): PrimaryVolumeSpaceRemaining = 0
Property(C): INSTALLLEVEL = 1
Property(C): UIDeplSrvValid = 1
Property(C): WINEVENTLOG_APP_ENABLE = 1
Property(C): WINEVENTLOG_SEC_ENABLE = 1
Property(C): WINEVENTLOG_SYS_ENABLE = 1
Property(C): UINoDeplSrvOrIndexer = 1
=== Logging stopped: 6/13/2016 14:33:54 ===
MSI (c) (3C:A8) [14:33:54:115]: Product: UniversalForwarder -- Installation failed.
MSI (c) (3C:A8) [14:33:54:115]: Windows Installer installed the product. Product Name: UniversalForwarder. Product Version: 6.3.4.0. Product Language: 1033. Manufacturer: Splunk, Inc.. Installation success or error status: 1603.
... View more