It appears as though there is no way to include the "Splunk technology add-on for windows" during a silent install of the v6 universal forwarder. Doing a silent install without this add-on throws the following error in splunkd log....
11-27-2013 12:47:49.171 -0500 ERROR ExecProcessor - message from ""C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe"" splunk-netmon - NetmonConfig::InitNetmonConfig: No valid stanzas found.
Manual installation work fine and creates the typical MSICreated inputs.conf in the tech add-on folder instead.
If you install the Splunk universal forwarder using the MSI with a line such as the following:
msiexec.exe /i "%SPLUNK_MSI%" LAUNCHSPLUNK=0 AGREETOLICENSE=Yes /quiet
Thanks delink, good information to be aware of. Unfortunately this doesn't help our deployment setup. We manage our forwarder deploys via puppet, and the silent install option would be perfect except for this one issue.
Seems like a significant oversight by the splunk folks, where this add-on is mandatory in the installation.