Getting Data In

Deployment Problems with SCCM

LiquidTension
Path Finder

I am currently testing deployment of the universal forwarder. The end goal is to have it on all windows computers so they are ready to pull data from a deployment server when I enable them to (we are taking a phased approach to rollout).

What I am seeing is if I run the installation manually from a server directly with

msiexec.exe /q ALLUSERS=2 /m MSIASQSH /i "splunkforwarder-5.0.2-149561-x64-release.msi" DEPLOYMENT_SERVER="Myserver:8089" AGREETOLICENSE=Yes

everything works fine and the deploymentclient.conf file appears. If I use those switches with the MSI through an SCCM deployment everything installs but it does not create the deploymentclient.conf file.

Has anybody else experienced this? I would prefer not to have to push a bat file containing switches.

0 Karma
1 Solution

LiquidTension
Path Finder

I dug deeper and discovered that the server that was being used for testing already had a universal forwarder on it...Doh! Package does exactly what it is supposed to in that case. When pushed to a Windows server that did not already have the Universal forwarder, everything worked.

View solution in original post

0 Karma

LiquidTension
Path Finder

I dug deeper and discovered that the server that was being used for testing already had a universal forwarder on it...Doh! Package does exactly what it is supposed to in that case. When pushed to a Windows server that did not already have the Universal forwarder, everything worked.

0 Karma
Get Updates on the Splunk Community!

Stay Connected: Your Guide to May Tech Talks, Office Hours, and Webinars!

Take a look below to explore our upcoming Community Office Hours, Tech Talks, and Webinars this month. This ...

They're back! Join the SplunkTrust and MVP at .conf24

With our highly anticipated annual conference, .conf, comes the fez-wearers you can trust! The SplunkTrust, as ...

Enterprise Security Content Update (ESCU) | New Releases

Last month, the Splunk Threat Research Team had two releases of new security content via the Enterprise ...