for me the msiexec.exe logs didn't work.. but i found out that splunk requires a functional WMI to install the services. you can check your WMI here: windows link in german (its a german windows site but there should be a similar one in english somewhere..) sorry for my bad english it's not my native language.. ... View more