Hi all, We are currently attempting to upgrade Splunk Universal Forwarder to version 10.0.2 (x64) across our Windows server estate. The upgrade succeeds without issue on: Windows Server 2019 Windows Server 2022 However, it consistently fails on: Windows Server 2016 Standard Version 1607 OS Build 14393.8868 (fully patched) Observed Behaviour on Windows Server 2016 - The MSI installation fails with: Windows Installer Event ID 1033 Exit code: 1603 (Fatal error during installation) The verbose MSI log shows failure during the custom action: GenRandomPassword When executing: splunk.exe cmd splunkd gen-random-passwd Process exit code: 0xC0000139 (STATUS_ENTRYPOINT_NOT_FOUND) If the binaries are partially installed, attempting to start the service results in: splunkd.exe – Entry Point Not Found The procedure entry point SetThreadDescription could not be located... Key Points The issue occurs on multiple Server 2016 systems. All systems are fully patched. The same installer works correctly on Server 2019 and 2022. This strongly suggests a platform compatibility issue specific to Server 2016. Could you please confirm: Is Splunk Universal Forwarder 10.0.2 x64 officially supported on Windows Server 2016 (1607 / build 14393)? Has support for Server 2016 been deprecated or limited in the 10.x branch? If 10.x is not supported on Server 2016, what is the recommended maximum supported UF version for that OS?
... View more