Solved

SCCM 2012 - Deploy Splunk UniversalForwarder as Application

Posted on 2016-07-30
3
190 Views
Last Modified: 2016-08-11
Hello Everyone:

I am trying to deploy Splunk UniversalForwarder as Application (.MSI).  I deploy/advertise it to a Windows 2012 Server and it downloads to the Windows\ccmcache directory correctly.  However, when the MSI runs from the SCCM Deployment, it will first add the HKEY_CLASSES_ROOT\Installer\Products\C33E90967C4508347909398E437BB8FA and the MSI will then respond with "The version of the UniversalForwarder has already been installed on this computer."

When I run the .MSI from the same command line within a run or command window, I do not get this issue.

Any thoughts on why this is occurring when I deploy the .msi through SCCM 2012?
0
Comment
Question by:rmessing171
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
3 Comments
 
LVL 18

Accepted Solution

by:
Mike T earned 500 total points
ID: 41736577
Hi,

It does not matter (usually) what the app is. The important thing is what format the software is, how you added it to ConfigMgr and how it installs normally with silent switches.

As it's an MSI that means things are generally a lot easier, as the wizard does most of the work for you.

You've created an application. By default the install command line will be

msiexec /i SplunkUF.msi /qn

If you edited this field make sure it's correct. It's always wise to add logging for troubleshooting here so the command line becomes:

msiexec /i SplunkUF.msi /qn /l*v c:\temp\Splunk.log

You have to understand a little about MSI logs which can be arcane at the best of times. Tip: use CMtrace to read it anyway.

Note, the uninstall GUID will also populate in the field below that. Make sure you click on the bottom button and browse to the MSI to manage the source otherwise MSI repairs will not be "owned" by CM and likely fail.

As for the failure to install, it looks like the MSI is meeting the detection method rule. The default behaviour is to look for the MSI GUID, here:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\

If you have changed the detection method then look for the presence of the file\regkey you used.
When you're testing you have to be 100% sure that any uninstall is clean and leaves no traces of the app whatsoever. No files, no registry, no cached files, fonts, icons, shortcuts.

Apps are a lot better than they used to be but some are still a bit dirty and leave things behind.

What is the command-line you use to do the manual install?

It looks like there's a slight different otherwise you would get the same behaviour. Either way, MSI logs will be a massive help.

Finally speaking of logs, check the CM logs c:\windows\ccm\logs\appdeploy.log and ccmexec.log.

Mike
0
 

Author Closing Comment

by:rmessing171
ID: 41752914
Thank you for your assistance!
0
 
LVL 18

Expert Comment

by:Mike T
ID: 41752955
You're very welcome
0

Featured Post

Free Tool: IP Lookup

Get more info about an IP address or domain name, such as organization, abuse contacts and geolocation.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

The following article discusses and demonstrates the advantages of using Pull Distribution Points in SCCM 2012 SP1 or higher as opposed to traditional push based architecture
Adding Computers to AD groups through an SCCM Task Sequence
NetCrunch network monitor is a highly extensive platform for network monitoring and alert generation. In this video you'll see a live demo of NetCrunch with most notable features explained in a walk-through manner. You'll also get to know the philos…
In this brief tutorial Pawel from AdRem Software explains how you can quickly find out which services are running on your network, or what are the IP addresses of servers responsible for each service. Software used is freeware NetCrunch Tools (https…

734 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question