Solved

SCCM 2012 - Deploy Splunk UniversalForwarder as Application

Posted on 2016-07-30
3
82 Views
Last Modified: 2016-08-11
Hello Everyone:

I am trying to deploy Splunk UniversalForwarder as Application (.MSI).  I deploy/advertise it to a Windows 2012 Server and it downloads to the Windows\ccmcache directory correctly.  However, when the MSI runs from the SCCM Deployment, it will first add the HKEY_CLASSES_ROOT\Installer\Products\C33E90967C4508347909398E437BB8FA and the MSI will then respond with "The version of the UniversalForwarder has already been installed on this computer."

When I run the .MSI from the same command line within a run or command window, I do not get this issue.

Any thoughts on why this is occurring when I deploy the .msi through SCCM 2012?
0
Comment
Question by:rmessing171
  • 2
3 Comments
 
LVL 17

Accepted Solution

by:
Mike T earned 500 total points
ID: 41736577
Hi,

It does not matter (usually) what the app is. The important thing is what format the software is, how you added it to ConfigMgr and how it installs normally with silent switches.

As it's an MSI that means things are generally a lot easier, as the wizard does most of the work for you.

You've created an application. By default the install command line will be

msiexec /i SplunkUF.msi /qn

If you edited this field make sure it's correct. It's always wise to add logging for troubleshooting here so the command line becomes:

msiexec /i SplunkUF.msi /qn /l*v c:\temp\Splunk.log

You have to understand a little about MSI logs which can be arcane at the best of times. Tip: use CMtrace to read it anyway.

Note, the uninstall GUID will also populate in the field below that. Make sure you click on the bottom button and browse to the MSI to manage the source otherwise MSI repairs will not be "owned" by CM and likely fail.

As for the failure to install, it looks like the MSI is meeting the detection method rule. The default behaviour is to look for the MSI GUID, here:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\

If you have changed the detection method then look for the presence of the file\regkey you used.
When you're testing you have to be 100% sure that any uninstall is clean and leaves no traces of the app whatsoever. No files, no registry, no cached files, fonts, icons, shortcuts.

Apps are a lot better than they used to be but some are still a bit dirty and leave things behind.

What is the command-line you use to do the manual install?

It looks like there's a slight different otherwise you would get the same behaviour. Either way, MSI logs will be a massive help.

Finally speaking of logs, check the CM logs c:\windows\ccm\logs\appdeploy.log and ccmexec.log.

Mike
0
 

Author Closing Comment

by:rmessing171
ID: 41752914
Thank you for your assistance!
0
 
LVL 17

Expert Comment

by:Mike T
ID: 41752955
You're very welcome
0

Featured Post

Is Your Active Directory as Secure as You Think?

More than 75% of all records are compromised because of the loss or theft of a privileged credential. Experts have been exploring Active Directory infrastructure to identify key threats and establish best practices for keeping data safe. Attend this month’s webinar to learn more.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Article by: Leon
Software Metering within our group of companies has always been an afterthought until auditing of software and licensing became a pain point. Orchestrator and SCCM metering gave us the answer and it was an exciting process.
A customer recently asked me about anti-malware and the different deployment options available for his business. Daily news about cyberattacks, zero-day vulnerabilities, and companies that suffered a security breach made him wonder if the endpoint a…
Video by: Mark
This lesson goes over how to construct ordered and unordered lists and how to create hyperlinks.
Hi friends,  in this video  I'll show you how new windows 10 user can learn the using of windows 10. Thank you.

911 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

23 Experts available now in Live!

Get 1:1 Help Now