MSI
WinGet
UniversalForwarder
Splunk, Inc. · 10.0.2 · x64
Before deploying, verify this file with VirusTotal ↗
Silent Commands
Install
msiexec /i splunkforwarder-10.0.2-e2d18b4767e9-windows-x64.msi /quiet /norestart
InstallPath
msiexec /i splunkforwarder-10.0.2-e2d18b4767e9-windows-x64.msi /quiet /norestart INSTALLDIR="<INSTALLPATH>"
Custom
msiexec /i splunkforwarder-10.0.2-e2d18b4767e9-windows-x64.msi /quiet /norestart AGREETOLICENSE=YES
Intune Detection Rule
MSI Rule
Rule type
MSI information
Product code
{FCCA8F91-527B-4902-8343-8C9368C28A7B}
Product version operator
Greater than or equal to
Product version
10.0.2
MSI Properties
Product Code
{FCCA8F91-527B-4902-8343-8C9368C28A7B}
File Identity
Filename
splunkforwarder-10.0.2-e2d18b4767e9-windows-x64.msi
Signature
Status
Upload installer to verify signature
Installer Selection
WinGet Package
Package ID
Splunk.UniversalForwarder
Version
10.0.2
Description
The universal forwarder collects data from a data source or another forwarder and sends it to a forwarder or a Splunk deployment. With a universal forwarder, you can send data to Splunk Enterprise, Splunk Light, or Splunk Cloud.
License
Proprietary
↗