Hi All, I’m facing an issue while installing the Splunk Universal Forwarder on my Windows server using the MSI command. From the installation logs I extracted (see below), it appears that the installer fails and rolls back because it is unable to install the regmon driver. Is there a way to exclude the installation of the regmon driver when running the MSI installer? MSI (s) (24:C8) [12:22:57:569]: Hello, I'm your 64bit Elevated Non-remapped custom action server. InstallRegmonDrv: Warning: Invalid property ignored: FailCA=. InstallRegmonDrv: Info: Driver inf file: D:\Program Files\SplunkUniversalForwarder\bin\splunkdrv.inf. InstallRegmonDrv: Info: Enter. Args: rundll32.exe, setupapi,InstallHinfSection DefaultInstall 128 D:\Program Files\SplunkUniversalForwarder\bin\splunkdrv.inf InstallRegmonDrv: Info: SystemPath is: C:\Windows\system32\ InstallRegmonDrv: Info: Execute string: C:\Windows\system32\cmd.exe /c "C:\Windows\system32\rundll32.exe setupapi,InstallHinfSection DefaultInstall 128 D:\Program Files\SplunkUniversalForwarder\bin\splunkdrv.inf >> "C:\Users\PDCC07~1.RAD\AppData\Local\Temp\splunk.log" 2>&1" InstallRegmonDrv: Error: Failed to create process : 0x5 InstallRegmonDrv: Warning: Failed to install regmon driver. InstallRegmonDrv: Error 0x80004005: Cannot install regmon driver. CustomAction InstallRegmonDrv returned actual error code 1603 (note this may not be 100% accurate if translation happened inside sandbox) MSI (s) (24:38) [12:22:57:673]: Note: 1: 2265 2: 3: -2147287035 MSI (s) (24:38) [12:22:57:674]: User policy value 'DisableRollback' is 0 MSI (s) (24:38) [12:22:57:674]: Machine policy value 'DisableRollback' is 0 Action ended 12:22:57: InstallFinalize. Return value 3. MSI (s) (24:38) [12:22:57:692]: Note: 1: 2318 2: MSI (s) (24:38) [12:22:57:697]: Executing op: Header(Signature=1397708873,Version=500,Timestamp=1552900824,LangId=1033,Platform=589824,ScriptType=2,ScriptMajorVersion=21,ScriptMinorVersion=4,ScriptAttributes=1) MSI (s) (24:38) [12:22:57:697]: Executing op: DialogInfo(Type=0,Argument=1033) MSI (s) (24:38) [12:22:57:697]: Executing op: DialogInfo(Type=1,Argument=UniversalForwarder) MSI (s) (24:38) [12:22:57:698]: Executing op: RollbackInfo(,RollbackAction=Rollback,RollbackDescription=Rolling back
... View more