This is an old thread so you may be more likely to get responses from a new question. Have you tried untarring the file rather than using the splunk install command? 7-zip can be used to extract the .spl file to %SPLUNK_HOME%\etc\apps ... View more

@kymkin  I'm not exactly sure where the install is failing for you, but I can tell you the additional parameters I've successfully used for my install script. Adding the directory of the forwarder program file location. (i.e., C:\ or D:\ drive before the .msi file name) INSTALLDIR_ parameter (determines where install location of the UF program) I add the the license agreement parameter prior to the log collection parameters. Not sure if this actually changes the install process or not. SPLUNKUSERNAME/SPLUNKPASSWORD parameters to set your own admin credentials. /passive end flag (instead of quiet). This is essentially a quiet installation with a progress display. Hope this helps. ... View more