Hi @pagillar, Please see here for instructions on how to troubleshoot further: https://community.splunk.com/t5/Installation/Install-issue-on-Server-2016/m-p/540173/highlight/true#.... Cheers,     - Jo. ... View more

Hi @mofonguero, Please see here for instructions on how to troubleshoot further: https://community.splunk.com/t5/Installation/Install-issue-on-Server-2016/m-p/540173/highlight/true#.... Cheers,     - Jo. ... View more

Hi @_alex, Unfortunately installation failures typically end very generically so it's impossible to know what happened without more information. Please see here for instructions on how to troubleshoot further: https://community.splunk.com/t5/Installation/Install-issue-on-Server-2016/m-p/540173/highlight/true#.... Cheers,     - Jo.   ... View more

Hi @Gregski11, Hmmm...not much to go on there unfortunately.  Is there a %TEMP%\splunk.log?  How long does it take to fail to start?  There may be salient errors and/or warnings in splunkd.log and/or web_service.log.  If there's nothing there, then we'll probably need to resort to a Process Monitor trace, but unfortunately that's not typically very shareable here. Are you on the splunk-usergroups Slack, perchance? Cheers,    - Jo.   ... View more

HI @Gregski11 , Everything appears be fine in the snippet you posted.  Please see here for instructions on how to troubleshoot further: https://community.splunk.com/t5/Installation/Install-issue-on-Server-2016/m-p/540173/highlight/true#M7187. Cheers,     - Jo.   ... View more

Hey @jmancyber, Oh, that's a great find.  Thanks for reporting back, it's always helpful! Cheers,    - Jo.   ... View more

Hi @jmancyber, Well, it looks like msiexec.exe doesn't think it exists.  Are you maybe assuming something about the current working directory that may not be true? Cheers,    - Jo.   ... View more

Hi @jmancyber, Oh dear.  Is this an upgrade?  Does this file exist: C:\IntunePacker\SourceSplunk\splunkforwarder.msi? Cheers,    - Jo. ... View more

Hi @jmancyber, Have you tried enabling logging (something like: /l*vx msiexec.log)?  Does it acknowledge those parameters as being set?  What's the last thing it does just before it fails (search for "return value 3"). Cheers,    - Jo.   ... View more

Hmmm...interesting.  That should be implied, but thanks for letting us know! ... View more

Hi @rmn, Ah ok!  Well, based on that description, it definitely sounds like something is going wrong.  I would say that your best bet is to contact Splunk Support. Cheers,    - Jo.   ... View more

Hi @rmn, Well, it should restart in these situations based on the logging...so I'm not sure I follow now.  Are you saying that it then continually restarts like every minute or something like that? Cheers,    - Jo.   ... View more

Hi @mk_ultra, Please see the following reply for instructions on how to troubleshoot: https://community.splunk.com/t5/Installation/Install-issue-on-Server-2016/m-p/540173/highlight/true#... Cheers,    - Jo. ... View more

Hi @rmn, So are you saying that when this happens, Splunk does not automatically restart? Cheers,    - Jo.   ... View more

Hi @SvenBirke, I can confirm that the Splunk Windows Installer package does not do anything special on servers that are running Exchange.  Were you able to follow the instructions in the link I posted above? Cheers,    - Jo. ... View more