Skip to content

Instantly share code, notes, and snippets.

Created April 22, 2015 15:23
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save anonymous/8b692986e99f8945a836 to your computer and use it in GitHub Desktop.
Save anonymous/8b692986e99f8945a836 to your computer and use it in GitHub Desktop.
=== Verbose logging started: 22/04/2015 16:03:51 Build type: SHIP UNICODE 5.00.9600.00 Calling process: C:\Windows\System32\msiexec.exe ===
MSI (c) (58:5C) [16:03:51:453]: Font created. Charset: Req=0, Ret=0, Font: Req=MS Shell Dlg, Ret=MS Shell Dlg
MSI (c) (58:5C) [16:03:51:453]: Font created. Charset: Req=0, Ret=0, Font: Req=MS Shell Dlg, Ret=MS Shell Dlg
MSI (c) (58:08) [16:03:51:469]: Resetting cached policy values
MSI (c) (58:08) [16:03:51:469]: Machine policy value 'Debug' is 0
MSI (c) (58:08) [16:03:51:469]: ******* RunEngine:
******* Product: D:\Install\splunkforwarder-6.2.2-255606-x64-release.msi
******* Action:
******* CommandLine: **********
MSI (c) (58:08) [16:03:51:469]: Machine policy value 'DisableUserInstalls' is 0
MSI (c) (58:08) [16:03:51:469]: SOFTWARE RESTRICTION POLICY: Verifying package --> 'D:\Install\splunkforwarder-6.2.2-255606-x64-release.msi' against software restriction policy
MSI (c) (58:08) [16:03:51:469]: SOFTWARE RESTRICTION POLICY: D:\Install\splunkforwarder-6.2.2-255606-x64-release.msi has a digital signature
MSI (c) (58:08) [16:03:51:625]: SOFTWARE RESTRICTION POLICY: D:\Install\splunkforwarder-6.2.2-255606-x64-release.msi is permitted to run at the 'unrestricted' authorization level.
MSI (c) (58:08) [16:03:51:640]: Cloaking enabled.
MSI (c) (58:08) [16:03:51:640]: Attempting to enable all disabled privileges before calling Install on Server
MSI (c) (58:08) [16:03:51:640]: End dialog not enabled
MSI (c) (58:08) [16:03:51:640]: Original package ==> D:\Install\splunkforwarder-6.2.2-255606-x64-release.msi
MSI (c) (58:08) [16:03:51:640]: Package we're running from ==> D:\Install\splunkforwarder-6.2.2-255606-x64-release.msi
MSI (c) (58:08) [16:03:51:640]: APPCOMPAT: Compatibility mode property overrides found.
MSI (c) (58:08) [16:03:51:640]: APPCOMPAT: looking for appcompat database entry with ProductCode '{D77B0D44-D35B-4BD3-A54E-89CBAE2086E6}'.
MSI (c) (58:08) [16:03:51:640]: APPCOMPAT: no matching ProductCode found in database.
MSI (c) (58:08) [16:03:51:640]: MSCOREE not loaded loading copy from system32
MSI (c) (58:08) [16:03:51:640]: Machine policy value 'TransformsSecure' is 1
MSI (c) (58:08) [16:03:51:640]: Machine policy value 'DisablePatch' is 0
MSI (c) (58:08) [16:03:51:640]: Machine policy value 'AllowLockdownPatch' is 0
MSI (c) (58:08) [16:03:51:640]: Machine policy value 'DisableMsi' is 1
MSI (c) (58:08) [16:03:51:640]: Machine policy value 'AlwaysInstallElevated' is 0
MSI (c) (58:08) [16:03:51:640]: User policy value 'AlwaysInstallElevated' is 0
MSI (c) (58:08) [16:03:51:640]: Running product '{D77B0D44-D35B-4BD3-A54E-89CBAE2086E6}' with user privileges. DisableMsi policy is set to or defaulted to 1. This is the client and the user does not have full admin token. Evaulation is delayed until after credentials provided. This install could still be blocked
MSI (c) (58:08) [16:03:51:640]: Machine policy value 'DisableLUAPatching' is 0
MSI (c) (58:08) [16:03:51:640]: Machine policy value 'DisableFlyWeightPatching' is 0
MSI (c) (58:08) [16:03:51:640]: Enabling baseline caching for this transaction since all active patches are MSI 3.0 style MSPs or at least one MSI 3.0 minor update patch is active
MSI (c) (58:08) [16:03:51:640]: APPCOMPAT: looking for appcompat database entry with ProductCode '{D77B0D44-D35B-4BD3-A54E-89CBAE2086E6}'.
MSI (c) (58:08) [16:03:51:640]: APPCOMPAT: no matching ProductCode found in database.
MSI (c) (58:08) [16:03:51:640]: Transforms are not secure.
MSI (c) (58:08) [16:03:51:640]: PROPERTY CHANGE: Adding MsiLogFileLocation property. Its value is 'C:\Users\jjb01\AppData\Local\Temp\3\MSIda742.LOG'.
MSI (c) (58:08) [16:03:51:640]: Command Line: CURRENTDIRECTORY=D:\Install CLIENTUILEVEL=0 CLIENTPROCESSID=9560
MSI (c) (58:08) [16:03:51:640]: PROPERTY CHANGE: Adding PackageCode property. Its value is '{1586EC18-33AD-4646-B29D-F56E77D62B32}'.
MSI (c) (58:08) [16:03:51:640]: Product Code passed to Engine.Initialize: ''
MSI (c) (58:08) [16:03:51:640]: Product Code from property table before transforms: '{D77B0D44-D35B-4BD3-A54E-89CBAE2086E6}'
MSI (c) (58:08) [16:03:51:640]: Product Code from property table after transforms: '{D77B0D44-D35B-4BD3-A54E-89CBAE2086E6}'
MSI (c) (58:08) [16:03:51:640]: Product not registered: beginning first-time install
MSI (c) (58:08) [16:03:51:640]: PROPERTY CHANGE: Adding ProductState property. Its value is '-1'.
MSI (c) (58:08) [16:03:51:640]: Entering CMsiConfigurationManager::SetLastUsedSource.
MSI (c) (58:08) [16:03:51:640]: User policy value 'SearchOrder' is 'nmu'
MSI (c) (58:08) [16:03:51:640]: Adding new sources is allowed.
MSI (c) (58:08) [16:03:51:640]: PROPERTY CHANGE: Adding PackagecodeChanging property. Its value is '1'.
MSI (c) (58:08) [16:03:51:640]: Package name extracted from package path: 'splunkforwarder-6.2.2-255606-x64-release.msi'
MSI (c) (58:08) [16:03:51:640]: Package to be registered: 'splunkforwarder-6.2.2-255606-x64-release.msi'
MSI (c) (58:08) [16:03:51:640]: Note: 1: 2205 2: 3: Error
MSI (c) (58:08) [16:03:51:640]: Note: 1: 2262 2: AdminProperties 3: -2147287038
MSI (c) (58:08) [16:03:51:640]: Machine policy value 'AlwaysInstallElevated' is 0
MSI (c) (58:08) [16:03:51:640]: User policy value 'AlwaysInstallElevated' is 0
MSI (c) (58:08) [16:03:51:640]: Running product '{D77B0D44-D35B-4BD3-A54E-89CBAE2086E6}' with user privileges. DisableMsi policy is set to or defaulted to 1. This is the client and the user does not have full admin token. Evaulation is delayed until after credentials provided. This install could still be blocked
MSI (c) (58:08) [16:03:51:640]: PROPERTY CHANGE: Adding CURRENTDIRECTORY property. Its value is 'D:\Install'.
MSI (c) (58:08) [16:03:51:640]: PROPERTY CHANGE: Adding CLIENTUILEVEL property. Its value is '0'.
MSI (c) (58:08) [16:03:51:640]: PROPERTY CHANGE: Adding CLIENTPROCESSID property. Its value is '9560'.
MSI (c) (58:08) [16:03:51:640]: TRANSFORMS property is now:
MSI (c) (58:08) [16:03:51:640]: PROPERTY CHANGE: Adding VersionDatabase property. Its value is '200'.
MSI (c) (58:08) [16:03:51:656]: SHELL32::SHGetFolderPath returned: C:\Users\jjb01\AppData\Roaming
MSI (c) (58:08) [16:03:51:656]: SHELL32::SHGetFolderPath returned: C:\Users\jjb01\Favorites
MSI (c) (58:08) [16:03:51:656]: SHELL32::SHGetFolderPath returned: C:\Users\jjb01\AppData\Roaming\Microsoft\Windows\Network Shortcuts
MSI (c) (58:08) [16:03:51:656]: SHELL32::SHGetFolderPath returned: C:\Users\jjb01\Documents
MSI (c) (58:08) [16:03:51:656]: SHELL32::SHGetFolderPath returned: C:\Users\jjb01\AppData\Roaming\Microsoft\Windows\Printer Shortcuts
MSI (c) (58:08) [16:03:51:656]: SHELL32::SHGetFolderPath returned: C:\Users\jjb01\AppData\Roaming\Microsoft\Windows\Recent
MSI (c) (58:08) [16:03:51:656]: SHELL32::SHGetFolderPath returned: C:\Users\jjb01\AppData\Roaming\Microsoft\Windows\SendTo
MSI (c) (58:08) [16:03:51:656]: SHELL32::SHGetFolderPath returned: C:\Users\jjb01\AppData\Roaming\Microsoft\Windows\Templates
MSI (c) (58:08) [16:03:51:656]: SHELL32::SHGetFolderPath returned: C:\ProgramData
MSI (c) (58:08) [16:03:51:656]: SHELL32::SHGetFolderPath returned: C:\Users\jjb01\AppData\Local
MSI (c) (58:08) [16:03:51:656]: SHELL32::SHGetFolderPath returned: C:\Users\jjb01\Pictures
MSI (c) (58:08) [16:03:51:656]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools
MSI (c) (58:08) [16:03:51:656]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
MSI (c) (58:08) [16:03:51:656]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Start Menu\Programs
MSI (c) (58:08) [16:03:51:656]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Start Menu
MSI (c) (58:08) [16:03:51:656]: SHELL32::SHGetFolderPath returned: C:\Users\Public\Desktop
MSI (c) (58:08) [16:03:51:656]: SHELL32::SHGetFolderPath returned: C:\Users\jjb01\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
MSI (c) (58:08) [16:03:51:656]: SHELL32::SHGetFolderPath returned: C:\Users\jjb01\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
MSI (c) (58:08) [16:03:51:656]: SHELL32::SHGetFolderPath returned: C:\Users\jjb01\AppData\Roaming\Microsoft\Windows\Start Menu\Programs
MSI (c) (58:08) [16:03:51:656]: SHELL32::SHGetFolderPath returned: C:\Users\jjb01\AppData\Roaming\Microsoft\Windows\Start Menu
MSI (c) (58:08) [16:03:51:656]: SHELL32::SHGetFolderPath returned: C:\Users\jjb01\Desktop
MSI (c) (58:08) [16:03:51:656]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Templates
MSI (c) (58:08) [16:03:51:656]: SHELL32::SHGetFolderPath returned: C:\Windows\Fonts
MSI (c) (58:08) [16:03:51:656]: Note: 1: 2898 2: MS Sans Serif 3: MS Sans Serif 4: 0 5: 16
MSI (c) (58:08) [16:03:51:656]: MSI_LUA: Setting AdminUser property to 1 because this is the client or the user has already permitted elevation
MSI (c) (58:08) [16:03:51:656]: PROPERTY CHANGE: Adding AdminUser property. Its value is '1'.
MSI (c) (58:08) [16:03:51:656]: PROPERTY CHANGE: Adding Privileged property. Its value is '1'.
MSI (c) (58:08) [16:03:51:656]: Note: 1: 1402 2: HKEY_CURRENT_USER\Software\Microsoft\MS Setup (ACME)\User Info 3: 2
MSI (c) (58:08) [16:03:51:656]: PROPERTY CHANGE: Adding USERNAME property. Its value is 'Windows User'.
MSI (c) (58:08) [16:03:51:656]: Note: 1: 1402 2: HKEY_CURRENT_USER\Software\Microsoft\MS Setup (ACME)\User Info 3: 2
MSI (c) (58:08) [16:03:51:656]: PROPERTY CHANGE: Adding DATABASE property. Its value is 'D:\Install\splunkforwarder-6.2.2-255606-x64-release.msi'.
MSI (c) (58:08) [16:03:51:656]: PROPERTY CHANGE: Adding OriginalDatabase property. Its value is 'D:\Install\splunkforwarder-6.2.2-255606-x64-release.msi'.
MSI (c) (58:08) [16:03:51:656]: Machine policy value 'MsiDisableEmbeddedUI' is 0
MSI (c) (58:08) [16:03:51:656]: PROPERTY CHANGE: Adding SourceDir property. Its value is 'D:\Install\'.
MSI (c) (58:08) [16:03:51:656]: PROPERTY CHANGE: Adding SOURCEDIR property. Its value is 'D:\Install\'.
MSI (c) (58:5C) [16:03:51:656]: PROPERTY CHANGE: Adding VersionHandler property. Its value is '5.00'.
=== Logging started: 22/04/2015 16:03:51 ===
MSI (c) (58:08) [16:03:51:656]: Note: 1: 2205 2: 3: PatchPackage
MSI (c) (58:08) [16:03:51:656]: Machine policy value 'DisableRollback' is 0
MSI (c) (58:08) [16:03:51:656]: User policy value 'DisableRollback' is 0
MSI (c) (58:08) [16:03:51:656]: PROPERTY CHANGE: Adding UILevel property. Its value is '5'.
MSI (c) (58:08) [16:03:51:656]: Note: 1: 2203 2: C:\Windows\Installer\inprogressinstallinfo.ipi 3: -2147287038
MSI (c) (58:08) [16:03:51:656]: Note: 1: 2205 2: 3: LaunchCondition
MSI (c) (58:08) [16:03:51:656]: Note: 1: 2228 2: 3: LaunchCondition 4: SELECT `Condition` FROM `LaunchCondition`
MSI (c) (58:08) [16:03:51:656]: APPCOMPAT: [DetectVersionLaunchCondition] Failed to initialize pRecErr.
MSI (c) (58:08) [16:03:51:656]: PROPERTY CHANGE: Adding ACTION property. Its value is 'INSTALL'.
MSI (c) (58:08) [16:03:51:656]: Doing action: INSTALL
MSI (c) (58:08) [16:03:51:656]: Note: 1: 2205 2: 3: ActionText
Action 16:03:51: INSTALL.
Action start 16:03:51: INSTALL.
MSI (c) (58:08) [16:03:51:656]: UI Sequence table 'InstallUISequence' is present and populated.
MSI (c) (58:08) [16:03:51:656]: Running UISequence
MSI (c) (58:08) [16:03:51:656]: PROPERTY CHANGE: Adding EXECUTEACTION property. Its value is 'INSTALL'.
MSI (c) (58:08) [16:03:51:672]: Doing action: SetAllUsers
MSI (c) (58:08) [16:03:51:672]: Note: 1: 2205 2: 3: ActionText
Action 16:03:51: SetAllUsers.
Action start 16:03:51: SetAllUsers.
MSI (c) (58:08) [16:03:51:672]: Creating MSIHANDLE (1) of type 790542 for thread 2824
MSI (c) (58:78) [16:03:51:672]: Invoking remote custom action. DLL: C:\Users\jjb01\AppData\Local\Temp\3\MSIA82D.tmp, Entrypoint: SetAllUsersCA
MSI (c) (58:E8) [16:03:51:672]: Cloaking enabled.
MSI (c) (58:E8) [16:03:51:672]: Attempting to enable all disabled privileges before calling Install on Server
MSI (c) (58:E8) [16:03:51:672]: Connected to service for CA interface.
MSI (c) (58!34) [16:03:51:703]: Creating MSIHANDLE (2) of type 790541 for thread 9012
MSI (c) (58!34) [16:03:51:703]: Creating MSIHANDLE (3) of type 790531 for thread 9012
SetAllUsers: Entering SetAllUsers in C:\Users\jjb01\AppData\Local\Temp\3\MSIA82D.tmp, version 0.0.0.0
MSI (c) (58!34) [16:03:51:703]: Closing MSIHANDLE (3) of type 790531 for thread 9012
MSI (c) (58!34) [16:03:51:703]: Creating MSIHANDLE (4) of type 790531 for thread 9012
SetAllUsers: Info: Registry setting for current user is not found.
MSI (c) (58!34) [16:03:51:703]: Closing MSIHANDLE (4) of type 790531 for thread 9012
MSI (c) (58!34) [16:03:51:703]: Creating MSIHANDLE (5) of type 790531 for thread 9012
SetAllUsers: Info: ALLUSERS value for the existing installation: -1.
MSI (c) (58!34) [16:03:51:703]: Closing MSIHANDLE (5) of type 790531 for thread 9012
MSI (c) (58!34) [16:03:51:703]: Creating MSIHANDLE (6) of type 790531 for thread 9012
SetAllUsers: Info: Set ALLUSERS property to 1.
MSI (c) (58!34) [16:03:51:703]: Closing MSIHANDLE (6) of type 790531 for thread 9012
MSI (c) (58!34) [16:03:51:703]: Creating MSIHANDLE (7) of type 790531 for thread 9012
SetAllUsers: Info: Leave SetAllUsers: 0x0.
MSI (c) (58!34) [16:03:51:703]: Closing MSIHANDLE (7) of type 790531 for thread 9012
MSI (c) (58!34) [16:03:51:703]: Closing MSIHANDLE (2) of type 790541 for thread 9012
MSI (c) (58:78) [16:03:51:703]: Closing MSIHANDLE (1) of type 790542 for thread 2824
Action ended 16:03:51: SetAllUsers. Return value 1.
MSI (c) (58:08) [16:03:51:703]: Doing action: FindRelatedProducts
MSI (c) (58:08) [16:03:51:703]: Note: 1: 2205 2: 3: ActionText
Action 16:03:51: FindRelatedProducts. Searching for related applications
Action start 16:03:51: FindRelatedProducts.
Action ended 16:03:51: FindRelatedProducts. Return value 1.
MSI (c) (58:08) [16:03:51:703]: Skipping action: CheckSupportedOsXP (condition is false)
MSI (c) (58:08) [16:03:51:703]: Doing action: GetPreviousSettings
MSI (c) (58:08) [16:03:51:703]: Note: 1: 2205 2: 3: ActionText
Action 16:03:51: GetPreviousSettings.
Action start 16:03:51: GetPreviousSettings.
MSI (c) (58:08) [16:03:51:703]: Creating MSIHANDLE (8) of type 790542 for thread 2824
MSI (c) (58:20) [16:03:51:703]: Invoking remote custom action. DLL: C:\Users\jjb01\AppData\Local\Temp\3\MSIA84D.tmp, Entrypoint: GetPreviousSettingsCA
MSI (c) (58!B8) [16:03:51:719]: Creating MSIHANDLE (9) of type 790541 for thread 11192
MSI (c) (58!B8) [16:03:51:719]: Creating MSIHANDLE (10) of type 790531 for thread 11192
GetPreviousSettings: Entering GetPreviousSettings in C:\Users\jjb01\AppData\Local\Temp\3\MSIA84D.tmp, version 0.0.0.0
MSI (c) (58!B8) [16:03:51:719]: Closing MSIHANDLE (10) of type 790531 for thread 11192
MSI (c) (58!B8) [16:03:51:719]: Creating MSIHANDLE (11) of type 790531 for thread 11192
GetPreviousSettings: Info: no installed splunk products found
MSI (c) (58!B8) [16:03:51:719]: Closing MSIHANDLE (11) of type 790531 for thread 11192
MSI (c) (58!B8) [16:03:51:719]: Creating MSIHANDLE (12) of type 790531 for thread 11192
GetPreviousSettings: Info: Leave GetPreviousSettings: 0x0.
MSI (c) (58!B8) [16:03:51:719]: Closing MSIHANDLE (12) of type 790531 for thread 11192
MSI (c) (58!B8) [16:03:51:719]: Closing MSIHANDLE (9) of type 790541 for thread 11192
MSI (c) (58:20) [16:03:51:719]: Closing MSIHANDLE (8) of type 790542 for thread 2824
Action ended 16:03:51: GetPreviousSettings. Return value 1.
MSI (c) (58:08) [16:03:51:719]: Skipping action: Check32BitOn64 (condition is false)
MSI (c) (58:08) [16:03:51:719]: Doing action: CheckSupportedOs
MSI (c) (58:08) [16:03:51:719]: Note: 1: 2205 2: 3: ActionText
Action 16:03:51: CheckSupportedOs.
Action start 16:03:51: CheckSupportedOs.
MSI (c) (58:08) [16:03:51:719]: Creating MSIHANDLE (13) of type 790542 for thread 2824
MSI (c) (58:8C) [16:03:51:719]: Invoking remote custom action. DLL: C:\Users\jjb01\AppData\Local\Temp\3\MSIA85D.tmp, Entrypoint: CheckSupportedOsCA
MSI (c) (58!D4) [16:03:51:734]: Creating MSIHANDLE (14) of type 790541 for thread 5076
MSI (c) (58!D4) [16:03:51:734]: Creating MSIHANDLE (15) of type 790531 for thread 5076
CheckSupportedOs: Entering CheckSupportedOs in C:\Users\jjb01\AppData\Local\Temp\3\MSIA85D.tmp, version 0.0.0.0
MSI (c) (58!D4) [16:03:51:734]: Closing MSIHANDLE (15) of type 790531 for thread 5076
MSI (c) (58!D4) [16:03:51:734]: Closing MSIHANDLE (14) of type 790541 for thread 5076
MSI (c) (58:8C) [16:03:51:734]: Closing MSIHANDLE (13) of type 790542 for thread 2824
Action ended 16:03:51: CheckSupportedOs. Return value 1.
MSI (c) (58:08) [16:03:51:734]: Skipping action: CheckSupportedOsReturn (condition is false)
MSI (c) (58:08) [16:03:51:734]: Skipping action: PreventDowngrading (condition is false)
MSI (c) (58:08) [16:03:51:734]: Doing action: PrepareDlg
MSI (c) (58:08) [16:03:51:734]: Note: 1: 2205 2: 3: ActionText
Action 16:03:51: PrepareDlg.
Action start 16:03:51: PrepareDlg.
MSI (c) (58:5C) [16:03:51:734]: Note: 1: 2205 2: 3: Error
MSI (c) (58:5C) [16:03:51:734]: Note: 1: 2228 2: 3: Error 4: SELECT `Message` FROM `Error` WHERE `Error` = 2898
Info 2898.For WixUI_Font_Normal textstyle, the system created a 'Tahoma' font, in 0 character set, of 13 pixels height.
MSI (c) (58:5C) [16:03:51:734]: Note: 1: 2205 2: 3: Error
MSI (c) (58:5C) [16:03:51:734]: Note: 1: 2228 2: 3: Error 4: SELECT `Message` FROM `Error` WHERE `Error` = 2898
Info 2898.For WixUI_Font_Bigger textstyle, the system created a 'Tahoma' font, in 0 character set, of 19 pixels height.
Action 16:03:51: PrepareDlg. Dialog created
Action ended 16:03:51: PrepareDlg. Return value 1.
MSI (c) (58:08) [16:03:51:750]: Doing action: AppSearch
MSI (c) (58:08) [16:03:51:750]: Note: 1: 2205 2: 3: ActionText
Action 16:03:51: AppSearch. Searching for installed applications
Action start 16:03:51: AppSearch.
MSI (c) (58:08) [16:03:51:750]: Note: 1: 2205 2: 3: AppSearch
MSI (c) (58:08) [16:03:51:750]: Note: 1: 2228 2: 3: AppSearch 4: SELECT `Property`, `Signature_` FROM `AppSearch`
Action ended 16:03:51: AppSearch. Return value 0.
MSI (c) (58:08) [16:03:51:750]: Doing action: ValidateProductID
MSI (c) (58:08) [16:03:51:750]: Note: 1: 2205 2: 3: ActionText
Action 16:03:51: ValidateProductID.
Action start 16:03:51: ValidateProductID.
Action ended 16:03:51: ValidateProductID. Return value 1.
MSI (c) (58:08) [16:03:51:750]: Doing action: CostInitialize
MSI (c) (58:08) [16:03:51:750]: Note: 1: 2205 2: 3: ActionText
Action 16:03:51: CostInitialize. Computing space requirements
Action start 16:03:51: CostInitialize.
MSI (c) (58:08) [16:03:51:750]: Machine policy value 'MaxPatchCacheSize' is 10
MSI (c) (58:08) [16:03:51:750]: Baseline: Sorting baselines for {D77B0D44-D35B-4BD3-A54E-89CBAE2086E6}.
MSI (c) (58:08) [16:03:51:750]: Baseline: New baseline 6.2.2 from transaction.
MSI (c) (58:08) [16:03:51:750]: Baseline: Sorted order Native: Order 0.
MSI (c) (58:08) [16:03:51:750]: Baseline Data Table:
MSI (c) (58:08) [16:03:51:750]: ProductCode: {D77B0D44-D35B-4BD3-A54E-89CBAE2086E6} Version: 6.2.2 Attributes: 0 PatchId: Native BaselineId: -2147483648 Order: 0
MSI (c) (58:08) [16:03:51:750]: Baseline File Table:
MSI (c) (58:08) [16:03:51:750]: PROPERTY CHANGE: Adding ROOTDRIVE property. Its value is 'D:\'.
MSI (c) (58:08) [16:03:51:765]: PROPERTY CHANGE: Adding CostingComplete property. Its value is '0'.
Action ended 16:03:51: CostInitialize. Return value 1.
MSI (c) (58:08) [16:03:51:765]: Doing action: FileCost
MSI (c) (58:08) [16:03:51:765]: Note: 1: 2205 2: 3: ActionText
Action 16:03:51: FileCost. Computing space requirements
Action start 16:03:51: FileCost.
MSI (c) (58:08) [16:03:51:765]: Note: 1: 2205 2: 3: MsiAssembly
MSI (c) (58:08) [16:03:51:765]: Note: 1: 2205 2: 3: Registry
MSI (c) (58:08) [16:03:51:765]: Note: 1: 2205 2: 3: Registry
MSI (c) (58:08) [16:03:51:765]: Note: 1: 2205 2: 3: Class
MSI (c) (58:08) [16:03:51:765]: Note: 1: 2205 2: 3: Extension
MSI (c) (58:08) [16:03:51:765]: Note: 1: 2205 2: 3: TypeLib
Action ended 16:03:51: FileCost. Return value 1.
MSI (c) (58:08) [16:03:51:765]: Doing action: CostFinalize
MSI (c) (58:08) [16:03:51:765]: Note: 1: 2205 2: 3: ActionText
Action 16:03:51: CostFinalize. Computing space requirements
Action start 16:03:51: CostFinalize.
MSI (c) (58:08) [16:03:51:765]: PROPERTY CHANGE: Adding OutOfDiskSpace property. Its value is '0'.
MSI (c) (58:08) [16:03:51:765]: PROPERTY CHANGE: Adding OutOfNoRbDiskSpace property. Its value is '0'.
MSI (c) (58:08) [16:03:51:765]: PROPERTY CHANGE: Adding PrimaryVolumeSpaceAvailable property. Its value is '0'.
MSI (c) (58:08) [16:03:51:765]: PROPERTY CHANGE: Adding PrimaryVolumeSpaceRequired property. Its value is '0'.
MSI (c) (58:08) [16:03:51:765]: PROPERTY CHANGE: Adding PrimaryVolumeSpaceRemaining property. Its value is '0'.
MSI (c) (58:08) [16:03:51:765]: Note: 1: 2205 2: 3: Patch
MSI (c) (58:08) [16:03:51:765]: Note: 1: 2205 2: 3: Condition
MSI (c) (58:08) [16:03:51:765]: PROPERTY CHANGE: Adding TARGETDIR property. Its value is 'D:\'.
MSI (c) (58:08) [16:03:51:765]: PROPERTY CHANGE: Adding INSTALLDIR property. Its value is 'C:\Program Files\SplunkUniversalForwarder\'.
MSI (c) (58:08) [16:03:51:765]: PROPERTY CHANGE: Adding dir9777D8246D1EFF4BCE1BBB3725F54761 property. Its value is 'C:\Program Files\SplunkUniversalForwarder\share\'.
MSI (c) (58:08) [16:03:51:765]: PROPERTY CHANGE: Adding dirD3369B4CFA7BF6DCB57584A7F452CA0A property. Its value is 'C:\Program Files\SplunkUniversalForwarder\share\splunk\'.
MSI (c) (58:08) [16:03:51:765]: PROPERTY CHANGE: Adding dir9DF6D6597089BA01028EE58CBBF75736 property. Its value is 'C:\Program Files\SplunkUniversalForwarder\share\splunk\3rdparty\'.
MSI (c) (58:08) [16:03:51:765]: PROPERTY CHANGE: Adding dirCC4BF51C3FB0120CE9B785729700549B property. Its value is 'C:\Program Files\SplunkUniversalForwarder\lib\'.
MSI (c) (58:08) [16:03:51:765]: PROPERTY CHANGE: Adding dir3E02976F57563947ADB6A8038DF4FCEF property. Its value is 'C:\Program Files\SplunkUniversalForwarder\etc\'.
MSI (c) (58:08) [16:03:51:765]: PROPERTY CHANGE: Adding dirCFB1DCA36329665F066AABF5013AECA9 property. Its value is 'C:\Program Files\SplunkUniversalForwarder\etc\system\'.
MSI (c) (58:08) [16:03:51:765]: PROPERTY CHANGE: Adding dir087F918F10A120B6907E2460F0868A49 property. Its value is 'C:\Program Files\SplunkUniversalForwarder\etc\system\static\'.
MSI (c) (58:08) [16:03:51:765]: PROPERTY CHANGE: Adding dir5083584ADFC4261D3780F7B66CB3B7B3 property. Its value is 'C:\Program Files\SplunkUniversalForwarder\etc\system\README\'.
MSI (c) (58:08) [16:03:51:765]: PROPERTY CHANGE: Adding dir858D19BEE324185B277CA79FFC48EDEE property. Its value is 'C:\Program Files\SplunkUniversalForwarder\etc\system\metadata\'.
MSI (c) (58:08) [16:03:51:765]: PROPERTY CHANGE: Adding dirD3351CCE95594E87E2CC36C1024B5B4C property. Its value is 'C:\Program Files\SplunkUniversalForwarder\etc\system\local\'.
MSI (c) (58:08) [16:03:51:765]: PROPERTY CHANGE: Adding dirBAC85229BB4A3494F5ECCB42AA1B824B property. Its value is 'C:\Program Files\SplunkUniversalForwarder\etc\system\default\'.
MSI (c) (58:08) [16:03:51:765]: PROPERTY CHANGE: Adding dir5320F257A67DB36A4CED85E00FC63DD0 property. Its value is 'C:\Program Files\SplunkUniversalForwarder\etc\system\bin\'.
MSI (c) (58:08) [16:03:51:765]: PROPERTY CHANGE: Adding dir6EEC3061DFBF56B9D6D2F8CBEC90FE26 property. Its value is 'C:\Program Files\SplunkUniversalForwarder\etc\shcluster\'.
MSI (c) (58:08) [16:03:51:765]: PROPERTY CHANGE: Adding dir7A9E1C63375946BEF53B8BCD2F9EB32B property. Its value is 'C:\Program Files\SplunkUniversalForwarder\etc\shcluster\users\'.
MSI (c) (58:08) [16:03:51:765]: PROPERTY CHANGE: Adding dir62FE35BBE7BD45CAEAB9D4261B2C1DA9 property. Its value is 'C:\Program Files\SplunkUniversalForwarder\etc\shcluster\apps\'.
MSI (c) (58:08) [16:03:51:765]: PROPERTY CHANGE: Adding dirEA4E77DDDE1ED87692CD92A2F7477FDA property. Its value is 'C:\Program Files\SplunkUniversalForwarder\etc\myinstall\'.
MSI (c) (58:08) [16:03:51:765]: PROPERTY CHANGE: Adding dir613AD2632481811E0F84C80F31F4CD56 property. Its value is 'C:\Program Files\SplunkUniversalForwarder\etc\modules\'.
MSI (c) (58:08) [16:03:51:765]: PROPERTY CHANGE: Adding dir36980B38D75840D0DF3C22965AFE352F property. Its value is 'C:\Program Files\SplunkUniversalForwarder\etc\modules\parsing\'.
MSI (c) (58:08) [16:03:51:765]: PROPERTY CHANGE: Adding dir4B3ADB252806E43AB420F8399AC61D45 property. Its value is 'C:\Program Files\SplunkUniversalForwarder\etc\modules\input\'.
MSI (c) (58:08) [16:03:51:765]: PROPERTY CHANGE: Adding dir08A71AA8240CE634F2916BD8FD86AE9D property. Its value is 'C:\Program Files\SplunkUniversalForwarder\etc\modules\input\winparsing\'.
MSI (c) (58:08) [16:03:51:765]: PROPERTY CHANGE: Adding dir350E86D3D8394619D5C56BE268AB8C03 property. Its value is 'C:\Program Files\SplunkUniversalForwarder\etc\modules\input\wineventlog\'.
MSI (c) (58:08) [16:03:51:765]: PROPERTY CHANGE: Adding dir500C5AB468B41B12914CAFC92914BB04 property. Its value is 'C:\Program Files\SplunkUniversalForwarder\etc\modules\input\UDP\'.
MSI (c) (58:08) [16:03:51:765]: PROPERTY CHANGE: Adding dir40C5047ABE9F85BC416CF37384338C22 property. Its value is 'C:\Program Files\SplunkUniversalForwarder\etc\modules\input\TCP\'.
MSI (c) (58:08) [16:03:51:765]: PROPERTY CHANGE: Adding dirAAE2EA6FF6BFF3615E0F6ECB4F8B8317 property. Its value is 'C:\Program Files\SplunkUniversalForwarder\etc\modules\input\tailfile\'.
MSI (c) (58:08) [16:03:51:765]: PROPERTY CHANGE: Adding dir623F2857FD6CE56C0C7472F3CF4B157E property. Its value is 'C:\Program Files\SplunkUniversalForwarder\etc\modules\input\structuredparsing\'.
MSI (c) (58:08) [16:03:51:765]: PROPERTY CHANGE: Adding dir3C58D8B9DB7081CC9C009A2FA233FFFD property. Its value is 'C:\Program Files\SplunkUniversalForwarder\etc\modules\input\fschangemanager\'.
MSI (c) (58:08) [16:03:51:765]: PROPERTY CHANGE: Adding dir3F2ED1881D5C561B698B737D96419537 property. Its value is 'C:\Program Files\SplunkUniversalForwarder\etc\modules\input\exec\'.
MSI (c) (58:08) [16:03:51:765]: PROPERTY CHANGE: Adding dirA6241AC9F2CFDD1D7D4327FB5A124C92 property. Its value is 'C:\Program Files\SplunkUniversalForwarder\etc\disabled-apps\'.
MSI (c) (58:08) [16:03:51:765]: PROPERTY CHANGE: Adding dir67189055EBCF5D1437F0A9D30368ED9C property. Its value is 'C:\Program Files\SplunkUniversalForwarder\etc\deployment-apps\'.
MSI (c) (58:08) [16:03:51:765]: PROPERTY CHANGE: Adding dir2A81299A0652E91159BE1994DD92316A property. Its value is 'C:\Program Files\SplunkUniversalForwarder\etc\auth\'.
MSI (c) (58:08) [16:03:51:765]: PROPERTY CHANGE: Adding dirB06939592AE1B7F84A5F1802888016F6 property. Its value is 'C:\Program Files\SplunkUniversalForwarder\etc\apps\'.
MSI (c) (58:08) [16:03:51:765]: PROPERTY CHANGE: Adding dir060491FD1B1F02D6FE725F0B7611F71E property. Its value is 'C:\Program Files\SplunkUniversalForwarder\etc\apps\SplunkUniversalForwarder\'.
MSI (c) (58:08) [16:03:51:765]: PROPERTY CHANGE: Adding dirF389DCA026B8D0A2E829970DE12F66F0 property. Its value is 'C:\Program Files\SplunkUniversalForwarder\etc\apps\SplunkUniversalForwarder\metadata\'.
MSI (c) (58:08) [16:03:51:765]: PROPERTY CHANGE: Adding dir2D2122E4CFDE8C263EEE7452554D6DA2 property. Its value is 'C:\Program Files\SplunkUniversalForwarder\etc\apps\SplunkUniversalForwarder\default\'.
MSI (c) (58:08) [16:03:51:765]: PROPERTY CHANGE: Adding dir302A0E4D0E8A28D4161D5640B55896DC property. Its value is 'C:\Program Files\SplunkUniversalForwarder\etc\apps\search\'.
MSI (c) (58:08) [16:03:51:765]: PROPERTY CHANGE: Adding dir66FC566CEF189328CCCC8589311D2503 property. Its value is 'C:\Program Files\SplunkUniversalForwarder\etc\apps\search\metadata\'.
MSI (c) (58:08) [16:03:51:765]: PROPERTY CHANGE: Adding dir05B2167CF0ED7EFD2AD93158875F568C property. Its value is 'C:\Program Files\SplunkUniversalForwarder\etc\apps\search\lookups\'.
MSI (c) (58:08) [16:03:51:765]: PROPERTY CHANGE: Adding dir0ABBB45398994B5C89841ED05851776C property. Its value is 'C:\Program Files\SplunkUniversalForwarder\etc\apps\search\default\'.
MSI (c) (58:08) [16:03:51:765]: PROPERTY CHANGE: Adding dir1ACCD951EA5C77FB92B36E8AB9382509 property. Its value is 'C:\Program Files\SplunkUniversalForwarder\etc\apps\learned\'.
MSI (c) (58:08) [16:03:51:765]: PROPERTY CHANGE: Adding dir28F70AA0D15CA730061DB84FFE88D805 property. Its value is 'C:\Program Files\SplunkUniversalForwarder\etc\apps\learned\metadata\'.
MSI (c) (58:08) [16:03:51:765]: PROPERTY CHANGE: Adding dir7C2F815EE2C9E7DBE85066CF5B056987 property. Its value is 'C:\Program Files\SplunkUniversalForwarder\etc\apps\learned\default\'.
MSI (c) (58:08) [16:03:51:765]: PROPERTY CHANGE: Adding dirFB744D04EDFDCD8AF58A1449ABBAD45F property. Its value is 'C:\Program Files\SplunkUniversalForwarder\etc\apps\introspection_generator_addon\'.
MSI (c) (58:08) [16:03:51:765]: PROPERTY CHANGE: Adding dirA4925C017BDFD103F37D0BDE702E9C43 property. Its value is 'C:\Program Files\SplunkUniversalForwarder\etc\apps\introspection_generator_addon\default\'.
MSI (c) (58:08) [16:03:51:765]: PROPERTY CHANGE: Adding dirFB7FAFCA28F7419DE35973B35C5D283E property. Its value is 'C:\Program Files\SplunkUniversalForwarder\etc\apps\introspection_generator_addon\bin\'.
MSI (c) (58:08) [16:03:51:765]: PROPERTY CHANGE: Adding dirA5528701EE26FFBF346CCE20EE8ACE99 property. Its value is 'C:\Program Files\SplunkUniversalForwarder\bin\'.
MSI (c) (58:08) [16:03:51:765]: PROPERTY CHANGE: Adding dirE99B67BA83CA9B283DA87308D2AB32C0 property. Its value is 'C:\Program Files\SplunkUniversalForwarder\bin\scripts\'.
MSI (c) (58:08) [16:03:51:765]: Target path resolution complete. Dumping Directory table...
MSI (c) (58:08) [16:03:51:765]: Note: target paths subject to change (via custom actions or browsing)
MSI (c) (58:08) [16:03:51:765]: Dir (target): Key: TARGETDIR , Object: D:\
MSI (c) (58:08) [16:03:51:765]: Dir (target): Key: ProgramFiles64Folder , Object: C:\Program Files\
MSI (c) (58:08) [16:03:51:765]: Dir (target): Key: INSTALLDIR , Object: C:\Program Files\SplunkUniversalForwarder\
MSI (c) (58:08) [16:03:51:765]: Dir (target): Key: dir9777D8246D1EFF4BCE1BBB3725F54761 , Object: C:\Program Files\SplunkUniversalForwarder\share\
MSI (c) (58:08) [16:03:51:765]: Dir (target): Key: dirD3369B4CFA7BF6DCB57584A7F452CA0A , Object: C:\Program Files\SplunkUniversalForwarder\share\splunk\
MSI (c) (58:08) [16:03:51:765]: Dir (target): Key: dir9DF6D6597089BA01028EE58CBBF75736 , Object: C:\Program Files\SplunkUniversalForwarder\share\splunk\3rdparty\
MSI (c) (58:08) [16:03:51:765]: Dir (target): Key: dirCC4BF51C3FB0120CE9B785729700549B , Object: C:\Program Files\SplunkUniversalForwarder\lib\
MSI (c) (58:08) [16:03:51:765]: Dir (target): Key: dir3E02976F57563947ADB6A8038DF4FCEF , Object: C:\Program Files\SplunkUniversalForwarder\etc\
MSI (c) (58:08) [16:03:51:765]: Dir (target): Key: dirCFB1DCA36329665F066AABF5013AECA9 , Object: C:\Program Files\SplunkUniversalForwarder\etc\system\
MSI (c) (58:08) [16:03:51:765]: Dir (target): Key: dir087F918F10A120B6907E2460F0868A49 , Object: C:\Program Files\SplunkUniversalForwarder\etc\system\static\
MSI (c) (58:08) [16:03:51:765]: Dir (target): Key: dir5083584ADFC4261D3780F7B66CB3B7B3 , Object: C:\Program Files\SplunkUniversalForwarder\etc\system\README\
MSI (c) (58:08) [16:03:51:765]: Dir (target): Key: dir858D19BEE324185B277CA79FFC48EDEE , Object: C:\Program Files\SplunkUniversalForwarder\etc\system\metadata\
MSI (c) (58:08) [16:03:51:765]: Dir (target): Key: dirD3351CCE95594E87E2CC36C1024B5B4C , Object: C:\Program Files\SplunkUniversalForwarder\etc\system\local\
MSI (c) (58:08) [16:03:51:765]: Dir (target): Key: dirBAC85229BB4A3494F5ECCB42AA1B824B , Object: C:\Program Files\SplunkUniversalForwarder\etc\system\default\
MSI (c) (58:08) [16:03:51:765]: Dir (target): Key: dir5320F257A67DB36A4CED85E00FC63DD0 , Object: C:\Program Files\SplunkUniversalForwarder\etc\system\bin\
MSI (c) (58:08) [16:03:51:765]: Dir (target): Key: dir6EEC3061DFBF56B9D6D2F8CBEC90FE26 , Object: C:\Program Files\SplunkUniversalForwarder\etc\shcluster\
MSI (c) (58:08) [16:03:51:765]: Dir (target): Key: dir7A9E1C63375946BEF53B8BCD2F9EB32B , Object: C:\Program Files\SplunkUniversalForwarder\etc\shcluster\users\
MSI (c) (58:08) [16:03:51:765]: Dir (target): Key: dir62FE35BBE7BD45CAEAB9D4261B2C1DA9 , Object: C:\Program Files\SplunkUniversalForwarder\etc\shcluster\apps\
MSI (c) (58:08) [16:03:51:765]: Dir (target): Key: dirEA4E77DDDE1ED87692CD92A2F7477FDA , Object: C:\Program Files\SplunkUniversalForwarder\etc\myinstall\
MSI (c) (58:08) [16:03:51:765]: Dir (target): Key: dir613AD2632481811E0F84C80F31F4CD56 , Object: C:\Program Files\SplunkUniversalForwarder\etc\modules\
MSI (c) (58:08) [16:03:51:765]: Dir (target): Key: dir36980B38D75840D0DF3C22965AFE352F , Object: C:\Program Files\SplunkUniversalForwarder\etc\modules\parsing\
MSI (c) (58:08) [16:03:51:765]: Dir (target): Key: dir4B3ADB252806E43AB420F8399AC61D45 , Object: C:\Program Files\SplunkUniversalForwarder\etc\modules\input\
MSI (c) (58:08) [16:03:51:765]: Dir (target): Key: dir08A71AA8240CE634F2916BD8FD86AE9D , Object: C:\Program Files\SplunkUniversalForwarder\etc\modules\input\winparsing\
MSI (c) (58:08) [16:03:51:765]: Dir (target): Key: dir350E86D3D8394619D5C56BE268AB8C03 , Object: C:\Program Files\SplunkUniversalForwarder\etc\modules\input\wineventlog\
MSI (c) (58:08) [16:03:51:765]: Dir (target): Key: dir500C5AB468B41B12914CAFC92914BB04 , Object: C:\Program Files\SplunkUniversalForwarder\etc\modules\input\UDP\
MSI (c) (58:08) [16:03:51:765]: Dir (target): Key: dir40C5047ABE9F85BC416CF37384338C22 , Object: C:\Program Files\SplunkUniversalForwarder\etc\modules\input\TCP\
MSI (c) (58:08) [16:03:51:765]: Dir (target): Key: dirAAE2EA6FF6BFF3615E0F6ECB4F8B8317 , Object: C:\Program Files\SplunkUniversalForwarder\etc\modules\input\tailfile\
MSI (c) (58:08) [16:03:51:765]: Dir (target): Key: dir623F2857FD6CE56C0C7472F3CF4B157E , Object: C:\Program Files\SplunkUniversalForwarder\etc\modules\input\structuredparsing\
MSI (c) (58:08) [16:03:51:765]: Dir (target): Key: dir3C58D8B9DB7081CC9C009A2FA233FFFD , Object: C:\Program Files\SplunkUniversalForwarder\etc\modules\input\fschangemanager\
MSI (c) (58:08) [16:03:51:765]: Dir (target): Key: dir3F2ED1881D5C561B698B737D96419537 , Object: C:\Program Files\SplunkUniversalForwarder\etc\modules\input\exec\
MSI (c) (58:08) [16:03:51:765]: Dir (target): Key: dirA6241AC9F2CFDD1D7D4327FB5A124C92 , Object: C:\Program Files\SplunkUniversalForwarder\etc\disabled-apps\
MSI (c) (58:08) [16:03:51:765]: Dir (target): Key: dir67189055EBCF5D1437F0A9D30368ED9C , Object: C:\Program Files\SplunkUniversalForwarder\etc\deployment-apps\
MSI (c) (58:08) [16:03:51:765]: Dir (target): Key: dir2A81299A0652E91159BE1994DD92316A , Object: C:\Program Files\SplunkUniversalForwarder\etc\auth\
MSI (c) (58:08) [16:03:51:765]: Dir (target): Key: dirB06939592AE1B7F84A5F1802888016F6 , Object: C:\Program Files\SplunkUniversalForwarder\etc\apps\
MSI (c) (58:08) [16:03:51:765]: Dir (target): Key: dir060491FD1B1F02D6FE725F0B7611F71E , Object: C:\Program Files\SplunkUniversalForwarder\etc\apps\SplunkUniversalForwarder\
MSI (c) (58:08) [16:03:51:765]: Dir (target): Key: dirF389DCA026B8D0A2E829970DE12F66F0 , Object: C:\Program Files\SplunkUniversalForwarder\etc\apps\SplunkUniversalForwarder\metadata\
MSI (c) (58:08) [16:03:51:765]: Dir (target): Key: dir2D2122E4CFDE8C263EEE7452554D6DA2 , Object: C:\Program Files\SplunkUniversalForwarder\etc\apps\SplunkUniversalForwarder\default\
MSI (c) (58:08) [16:03:51:765]: Dir (target): Key: dir302A0E4D0E8A28D4161D5640B55896DC , Object: C:\Program Files\SplunkUniversalForwarder\etc\apps\search\
MSI (c) (58:08) [16:03:51:765]: Dir (target): Key: dir66FC566CEF189328CCCC8589311D2503 , Object: C:\Program Files\SplunkUniversalForwarder\etc\apps\search\metadata\
MSI (c) (58:08) [16:03:51:765]: Dir (target): Key: dir05B2167CF0ED7EFD2AD93158875F568C , Object: C:\Program Files\SplunkUniversalForwarder\etc\apps\search\lookups\
MSI (c) (58:08) [16:03:51:765]: Dir (target): Key: dir0ABBB45398994B5C89841ED05851776C , Object: C:\Program Files\SplunkUniversalForwarder\etc\apps\search\default\
MSI (c) (58:08) [16:03:51:765]: Dir (target): Key: dir1ACCD951EA5C77FB92B36E8AB9382509 , Object: C:\Program Files\SplunkUniversalForwarder\etc\apps\learned\
MSI (c) (58:08) [16:03:51:765]: Dir (target): Key: dir28F70AA0D15CA730061DB84FFE88D805 , Object: C:\Program Files\SplunkUniversalForwarder\etc\apps\learned\metadata\
MSI (c) (58:08) [16:03:51:765]: Dir (target): Key: dir7C2F815EE2C9E7DBE85066CF5B056987 , Object: C:\Program Files\SplunkUniversalForwarder\etc\apps\learned\default\
MSI (c) (58:08) [16:03:51:765]: Dir (target): Key: dirFB744D04EDFDCD8AF58A1449ABBAD45F , Object: C:\Program Files\SplunkUniversalForwarder\etc\apps\introspection_generator_addon\
MSI (c) (58:08) [16:03:51:765]: Dir (target): Key: dirA4925C017BDFD103F37D0BDE702E9C43 , Object: C:\Program Files\SplunkUniversalForwarder\etc\apps\introspection_generator_addon\default\
MSI (c) (58:08) [16:03:51:765]: Dir (target): Key: dirFB7FAFCA28F7419DE35973B35C5D283E , Object: C:\Program Files\SplunkUniversalForwarder\etc\apps\introspection_generator_addon\bin\
MSI (c) (58:08) [16:03:51:765]: Dir (target): Key: dirA5528701EE26FFBF346CCE20EE8ACE99 , Object: C:\Program Files\SplunkUniversalForwarder\bin\
MSI (c) (58:08) [16:03:51:765]: Dir (target): Key: dirE99B67BA83CA9B283DA87308D2AB32C0 , Object: C:\Program Files\SplunkUniversalForwarder\bin\scripts\
MSI (c) (58:08) [16:03:51:765]: PROPERTY CHANGE: Adding INSTALLLEVEL property. Its value is '1'.
MSI (c) (58:08) [16:03:51:765]: Note: 1: 2205 2: 3: MsiAssembly
MSI (c) (58:08) [16:03:51:765]: Note: 1: 2228 2: 3: MsiAssembly 4: SELECT `MsiAssembly`.`Attributes`, `MsiAssembly`.`File_Application`, `MsiAssembly`.`File_Manifest`, `Component`.`KeyPath` FROM `MsiAssembly`, `Component` WHERE `MsiAssembly`.`Component_` = `Component`.`Component` AND `MsiAssembly`.`Component_` = ?
Action ended 16:03:51: CostFinalize. Return value 1.
MSI (c) (58:08) [16:03:51:765]: Skipping action: AcceptLicenseAgreement (condition is false)
MSI (c) (58:08) [16:03:51:765]: Doing action: UFInstallDlg
MSI (c) (58:08) [16:03:51:765]: Note: 1: 2205 2: 3: ActionText
Action 16:03:51: UFInstallDlg.
Action start 16:03:51: UFInstallDlg.
MSI (c) (58:5C) [16:03:51:781]: Note: 1: 2205 2: 3: Error
MSI (c) (58:5C) [16:03:51:781]: Note: 1: 2228 2: 3: Error 4: SELECT `Message` FROM `Error` WHERE `Error` = 2898
Info 2898.For WixUI_Font_Title textstyle, the system created a 'Tahoma' font, in 0 character set, of 14 pixels height.
Action 16:03:51: UFInstallDlg. Dialog created
MSI (c) (58:E4) [16:03:51:781]: Note: 1: 2205 2: 3: _RemoveFilePath
MSI (c) (58:E4) [16:03:51:797]: PROPERTY CHANGE: Modifying CostingComplete property. Its current value is '0'. Its new value: '1'.
MSI (c) (58:E4) [16:03:51:797]: Note: 1: 2205 2: 3: Registry
MSI (c) (58:E4) [16:03:51:797]: Note: 1: 2205 2: 3: BindImage
MSI (c) (58:E4) [16:03:51:797]: Note: 1: 2205 2: 3: ProgId
MSI (c) (58:E4) [16:03:51:797]: Note: 1: 2205 2: 3: PublishComponent
MSI (c) (58:E4) [16:03:51:797]: Note: 1: 2205 2: 3: SelfReg
MSI (c) (58:E4) [16:03:51:797]: Note: 1: 2205 2: 3: Extension
MSI (c) (58:E4) [16:03:51:797]: Note: 1: 2205 2: 3: Font
MSI (c) (58:E4) [16:03:51:797]: Note: 1: 2205 2: 3: Shortcut
MSI (c) (58:E4) [16:03:51:797]: Note: 1: 2205 2: 3: Class
MSI (c) (58:E4) [16:03:51:797]: Note: 1: 2205 2: 3: TypeLib
MSI (c) (58:E4) [16:03:51:797]: Note: 1: 2727 2:
MSI (c) (58:5C) [16:03:53:000]: PROPERTY CHANGE: Adding UILicenseAgreement property. Its value is '1'.
MSI (c) (58:5C) [16:03:53:000]: PROPERTY CHANGE: Modifying AGREETOLICENSE property. Its current value is 'No'. Its new value: 'Yes'.
MSI (c) (58:5C) [16:03:54:062]: Doing action: ParseCmdLineParams
MSI (c) (58:5C) [16:03:54:062]: Note: 1: 2205 2: 3: ActionText
Action 16:03:54: ParseCmdLineParams.
Action start 16:03:54: ParseCmdLineParams.
MSI (c) (58:5C) [16:03:54:062]: Creating MSIHANDLE (16) of type 790542 for thread 9308
MSI (c) (58:90) [16:03:54:062]: Invoking remote custom action. DLL: C:\Users\jjb01\AppData\Local\Temp\3\MSIB186.tmp, Entrypoint: ParseCmdLineParamsCA
MSI (c) (58!24) [16:03:54:078]: Creating MSIHANDLE (17) of type 790541 for thread 8484
MSI (c) (58!24) [16:03:54:078]: Creating MSIHANDLE (18) of type 790531 for thread 8484
MSI (c) (58!24) [16:03:54:078]: Closing MSIHANDLE (18) of type 790531 for thread 8484
MSI (c) (58!24) [16:03:54:078]: Creating MSIHANDLE (19) of type 790531 for thread 8484
MSI (c) (58!24) [16:03:54:078]: Closing MSIHANDLE (19) of type 790531 for thread 8484
MSI (c) (58!24) [16:03:54:078]: Creating MSIHANDLE (20) of type 790531 for thread 8484
MSI (c) (58!24) [16:03:54:078]: Closing MSIHANDLE (20) of type 790531 for thread 8484
MSI (c) (58!24) [16:03:54:078]: Creating MSIHANDLE (21) of type 790531 for thread 8484
MSI (c) (58!24) [16:03:54:078]: Closing MSIHANDLE (21) of type 790531 for thread 8484
MSI (c) (58!24) [16:03:54:078]: Closing MSIHANDLE (17) of type 790541 for thread 8484
MSI (c) (58:90) [16:03:54:078]: Closing MSIHANDLE (16) of type 790542 for thread 9308
Action ended 16:03:54: ParseCmdLineParams. Return value 1.
MSI (c) (58:5C) [16:03:54:078]: PROPERTY CHANGE: Modifying UICustomize property. Its current value is '0'. Its new value: '1'.
Action 16:03:54: ChangeDirDlg. Dialog created
MSI (c) (58:5C) [16:03:57:078]: Doing action: WixUIValidatePath
MSI (c) (58:5C) [16:03:57:078]: Note: 1: 2205 2: 3: ActionText
Action 16:03:57: WixUIValidatePath.
Action start 16:03:57: WixUIValidatePath.
MSI (c) (58:5C) [16:03:57:078]: Creating MSIHANDLE (22) of type 790542 for thread 9308
MSI (c) (58:3C) [16:03:57:078]: Invoking remote custom action. DLL: C:\Users\jjb01\AppData\Local\Temp\3\MSIBD4F.tmp, Entrypoint: ValidatePath
MSI (c) (58:E8) [16:03:57:078]: Cloaking enabled.
MSI (c) (58:E8) [16:03:57:078]: Attempting to enable all disabled privileges before calling Install on Server
MSI (c) (58:E8) [16:03:57:078]: Connected to service for CA interface.
MSI (c) (58!C8) [16:03:57:125]: Creating MSIHANDLE (23) of type 790541 for thread 8392
MSI (c) (58!C8) [16:03:57:125]: Creating MSIHANDLE (24) of type 790531 for thread 8392
MSI (c) (58!C8) [16:03:57:125]: Closing MSIHANDLE (24) of type 790531 for thread 8392
MSI (c) (58!C8) [16:03:57:125]: PROPERTY CHANGE: Adding WIXUI_INSTALLDIR_VALID property. Its value is '1'.
MSI (c) (58!C8) [16:03:57:125]: Closing MSIHANDLE (23) of type 790541 for thread 8392
MSI (c) (58:3C) [16:03:57:125]: Closing MSIHANDLE (22) of type 790542 for thread 9308
Action ended 16:03:57: WixUIValidatePath. Return value 1.
MSI (c) (58:5C) [16:03:57:140]: Note: 1: 2205 2: 3: Error
MSI (c) (58:5C) [16:03:57:140]: Note: 1: 2228 2: 3: Error 4: SELECT `Message` FROM `Error` WHERE `Error` = 2898
Info 2898.For SplunkUI_Font_Bold textstyle, the system created a 'Tahoma' font, in 0 character set, of 13 pixels height.
Action 16:03:57: CertDlg. Dialog created
MSI (c) (58:5C) [16:03:59:578]: Doing action: ValidateCertParams
MSI (c) (58:5C) [16:03:59:578]: Note: 1: 2205 2: 3: ActionText
Action 16:03:59: ValidateCertParams.
Action start 16:03:59: ValidateCertParams.
MSI (c) (58:5C) [16:03:59:578]: Creating MSIHANDLE (25) of type 790542 for thread 9308
MSI (c) (58:DC) [16:03:59:578]: Invoking remote custom action. DLL: C:\Users\jjb01\AppData\Local\Temp\3\MSIC714.tmp, Entrypoint: ValidateCertParamsCA
MSI (c) (58!E8) [16:03:59:594]: Creating MSIHANDLE (26) of type 790541 for thread 10728
MSI (c) (58!E8) [16:03:59:594]: Creating MSIHANDLE (27) of type 790531 for thread 10728
MSI (c) (58!E8) [16:03:59:594]: Closing MSIHANDLE (27) of type 790531 for thread 10728
MSI (c) (58!E8) [16:03:59:594]: PROPERTY CHANGE: Adding UICertParamsInvalid property. Its value is '0'.
MSI (c) (58!E8) [16:03:59:594]: Closing MSIHANDLE (26) of type 790541 for thread 10728
MSI (c) (58:DC) [16:03:59:594]: Closing MSIHANDLE (25) of type 790542 for thread 9308
Action ended 16:03:59: ValidateCertParams. Return value 1.
Action 16:03:59: AccontsDlg. Dialog created
Action 16:04:00: WinInputsDlg. Dialog created
MSI (c) (58:5C) [16:04:03:328]: Doing action: SetWindowsInputsParams
MSI (c) (58:5C) [16:04:03:328]: Note: 1: 2205 2: 3: ActionText
Action 16:04:03: SetWindowsInputsParams.
Action start 16:04:03: SetWindowsInputsParams.
MSI (c) (58:5C) [16:04:03:328]: Creating MSIHANDLE (28) of type 790542 for thread 9308
MSI (c) (58:C0) [16:04:03:328]: Invoking remote custom action. DLL: C:\Users\jjb01\AppData\Local\Temp\3\MSID5BB.tmp, Entrypoint: SetWindowsInputsParamsCA
MSI (c) (58!48) [16:04:03:328]: Creating MSIHANDLE (29) of type 790541 for thread 9032
MSI (c) (58!48) [16:04:03:328]: Creating MSIHANDLE (30) of type 790531 for thread 9032
MSI (c) (58!48) [16:04:03:328]: Closing MSIHANDLE (30) of type 790531 for thread 9032
MSI (c) (58!48) [16:04:03:328]: Closing MSIHANDLE (29) of type 790541 for thread 9032
MSI (c) (58:C0) [16:04:03:328]: Closing MSIHANDLE (28) of type 790542 for thread 9308
Action ended 16:04:03: SetWindowsInputsParams. Return value 1.
MSI (c) (58:5C) [16:04:03:344]: Note: 1: 2205 2: 3: Error
MSI (c) (58:5C) [16:04:03:344]: Note: 1: 2228 2: 3: Error 4: SELECT `Message` FROM `Error` WHERE `Error` = 2898
Info 2898.For SplunkUI_Font_Italic textstyle, the system created a 'Tahoma' font, in 0 character set, of 13 pixels height.
Action 16:04:03: DeplSrvIdxDlg. Dialog created
MSI (c) (58:5C) [16:04:06:308]: PROPERTY CHANGE: Adding UIDeplSrv property. Its value is '172.16.1.103'.
MSI (c) (58:5C) [16:04:10:948]: PROPERTY CHANGE: Adding UIDeplSrvPort property. Its value is '8089'.
MSI (c) (58:5C) [16:04:11:026]: Doing action: ValidateAndSetDeplSrvParams
MSI (c) (58:5C) [16:04:11:026]: Note: 1: 2205 2: 3: ActionText
Action 16:04:11: ValidateAndSetDeplSrvParams.
Action start 16:04:11: ValidateAndSetDeplSrvParams.
MSI (c) (58:5C) [16:04:11:026]: Creating MSIHANDLE (31) of type 790542 for thread 9308
MSI (c) (58:28) [16:04:11:026]: Invoking remote custom action. DLL: C:\Users\jjb01\AppData\Local\Temp\3\MSIF3D3.tmp, Entrypoint: ValidateAndSetDeplSrvParamsCA
MSI (c) (58!50) [16:04:11:042]: Creating MSIHANDLE (32) of type 790541 for thread 8784
MSI (c) (58!50) [16:04:11:042]: Creating MSIHANDLE (33) of type 790531 for thread 8784
MSI (c) (58!50) [16:04:11:042]: Closing MSIHANDLE (33) of type 790531 for thread 8784
MSI (c) (58!50) [16:04:11:042]: PROPERTY CHANGE: Adding UIDeplSrvValid property. Its value is '1'.
MSI (c) (58!50) [16:04:11:042]: Creating MSIHANDLE (34) of type 790531 for thread 8784
MSI (c) (58!50) [16:04:11:042]: Closing MSIHANDLE (34) of type 790531 for thread 8784
MSI (c) (58!50) [16:04:11:042]: PROPERTY CHANGE: Adding DEPLOYMENT_SERVER property. Its value is '172.16.1.103:8089'.
MSI (c) (58!50) [16:04:11:042]: Closing MSIHANDLE (32) of type 790541 for thread 8784
MSI (c) (58:28) [16:04:11:042]: Closing MSIHANDLE (31) of type 790542 for thread 9308
Action ended 16:04:11: ValidateAndSetDeplSrvParams. Return value 1.
Action 16:04:11: RecvIdxDlg. Dialog created
MSI (c) (58:5C) [16:04:16:101]: PROPERTY CHANGE: Adding UIRecvIdx property. Its value is '172.16.1.103'.
MSI (c) (58:5C) [16:04:19:854]: PROPERTY CHANGE: Adding UIRecvIdxPort property. Its value is '9997'.
MSI (c) (58:5C) [16:04:19:917]: Doing action: ValidateAndSetRecvIdxParams
MSI (c) (58:5C) [16:04:19:917]: Note: 1: 2205 2: 3: ActionText
Action 16:04:19: ValidateAndSetRecvIdxParams.
Action start 16:04:19: ValidateAndSetRecvIdxParams.
MSI (c) (58:5C) [16:04:19:917]: Creating MSIHANDLE (35) of type 790542 for thread 9308
MSI (c) (58:F4) [16:04:19:917]: Invoking remote custom action. DLL: C:\Users\jjb01\AppData\Local\Temp\3\MSI168F.tmp, Entrypoint: ValidateAndSetRecvIdxParamsCA
MSI (c) (58!68) [16:04:19:932]: Creating MSIHANDLE (36) of type 790541 for thread 11112
MSI (c) (58!68) [16:04:19:932]: Creating MSIHANDLE (37) of type 790531 for thread 11112
MSI (c) (58!68) [16:04:19:932]: Closing MSIHANDLE (37) of type 790531 for thread 11112
MSI (c) (58!68) [16:04:19:932]: PROPERTY CHANGE: Modifying UIRecvIdxValid property. Its current value is '0'. Its new value: '1'.
MSI (c) (58!68) [16:04:19:932]: Creating MSIHANDLE (38) of type 790531 for thread 11112
MSI (c) (58!68) [16:04:19:932]: Closing MSIHANDLE (38) of type 790531 for thread 11112
MSI (c) (58!68) [16:04:19:932]: PROPERTY CHANGE: Adding RECEIVING_INDEXER property. Its value is '172.16.1.103:9997'.
MSI (c) (58!68) [16:04:19:932]: PROPERTY CHANGE: Adding UINoDeplSrvOrIndexer property. Its value is '0'.
MSI (c) (58!68) [16:04:19:932]: Closing MSIHANDLE (36) of type 790541 for thread 11112
MSI (c) (58:F4) [16:04:19:932]: Closing MSIHANDLE (35) of type 790542 for thread 9308
Action ended 16:04:19: ValidateAndSetRecvIdxParams. Return value 1.
Action 16:04:19: UFVerifyReadyDlg. Dialog created
MSI (c) (58:5C) [16:04:20:448]: Note: 1: 2727 2:
MSI (c) (58:5C) [16:04:20:964]: Note: 1: 2727 2:
MSI (c) (58:5C) [16:04:21:463]: Note: 1: 2727 2:
Action ended 16:04:21: UFInstallDlg. Return value 1.
MSI (c) (58:08) [16:04:21:463]: Skipping action: MaintenanceWelcomeDlg (condition is false)
MSI (c) (58:08) [16:04:21:463]: Skipping action: ResumeDlg (condition is false)
MSI (c) (58:08) [16:04:21:463]: Doing action: ProgressDlg
MSI (c) (58:08) [16:04:21:463]: Note: 1: 2205 2: 3: ActionText
Action 16:04:21: ProgressDlg.
Action start 16:04:21: ProgressDlg.
Action 16:04:21: ProgressDlg. Dialog created
Action ended 16:04:21: ProgressDlg. Return value 1.
MSI (c) (58:08) [16:04:21:495]: Doing action: ProgressDlg1
MSI (c) (58:08) [16:04:21:495]: Note: 1: 2205 2: 3: ActionText
Action 16:04:21: ProgressDlg1.
Action start 16:04:21: ProgressDlg1.
Action 16:04:21: ProgressDlg1. Dialog created
Action ended 16:04:21: ProgressDlg1. Return value 1.
MSI (c) (58:08) [16:04:21:510]: Doing action: ExecuteAction
MSI (c) (58:08) [16:04:21:510]: Note: 1: 2205 2: 3: ActionText
Action 16:04:21: ExecuteAction.
Action start 16:04:21: ExecuteAction.
MSI (c) (58:08) [16:04:21:510]: PROPERTY CHANGE: Adding SECONDSEQUENCE property. Its value is '1'.
MSI (c) (58:08) [16:04:21:510]: Grabbed execution mutex.
MSI (c) (58:08) [16:04:21:510]: Incrementing counter to disable shutdown. Counter after increment: 0
MSI (c) (58:08) [16:04:21:510]: Switching to server: INSTALLDIR="C:\Program Files\SplunkUniversalForwarder\" TARGETDIR="D:\" AGREETOLICENSE="Yes" CURRENTDIRECTORY="D:\Install" CLIENTUILEVEL="0" CLIENTPROCESSID="9560" USERNAME="Windows User" SOURCEDIR="D:\Install\" ACTION="INSTALL" EXECUTEACTION="INSTALL" ROOTDRIVE="D:\" INSTALLLEVEL="1" SECONDSEQUENCE="1" WIXUI_INSTALLDIR_VALID="1" DEPLOYMENT_SERVER="172.16.1.103:8089" RECEIVING_INDEXER="172.16.1.103:9997" ADDLOCAL=Complete
MSI (s) (54:C0) [16:04:21:510]: Running installation inside multi-package transaction D:\Install\splunkforwarder-6.2.2-255606-x64-release.msi
MSI (s) (54:C0) [16:04:21:510]: Grabbed execution mutex.
MSI (s) (54:B4) [16:04:21:526]: Resetting cached policy values
MSI (s) (54:B4) [16:04:21:526]: Machine policy value 'Debug' is 0
MSI (s) (54:B4) [16:04:21:526]: ******* RunEngine:
******* Product: D:\Install\splunkforwarder-6.2.2-255606-x64-release.msi
******* Action: INSTALL
******* CommandLine: **********
MSI (s) (54:B4) [16:04:21:526]: Machine policy value 'DisableUserInstalls' is 0
MSI (s) (54:B4) [16:04:21:526]: Setting cached product context: machine assigned for product: 000021599B0090400000000000F01FEC
MSI (s) (54:B4) [16:04:21:526]: Using cached product context: machine assigned for product: 000021599B0090400000000000F01FEC
MSI (s) (54:B4) [16:04:21:526]: Setting cached product context: machine assigned for product: 002F6F3CB7D697849BEE07C0C01ECFAD
MSI (s) (54:B4) [16:04:21:526]: Using cached product context: machine assigned for product: 002F6F3CB7D697849BEE07C0C01ECFAD
MSI (s) (54:B4) [16:04:21:526]: Setting cached product context: machine assigned for product: 03D8475ED6E7E8A3FB6E1C0DC2D6ADBB
MSI (s) (54:B4) [16:04:21:526]: Using cached product context: machine assigned for product: 03D8475ED6E7E8A3FB6E1C0DC2D6ADBB
MSI (s) (54:B4) [16:04:21:526]: Setting cached product context: machine assigned for product: 04583E7B553E3053FA7D36B5F2F2671E
MSI (s) (54:B4) [16:04:21:526]: Using cached product context: machine assigned for product: 04583E7B553E3053FA7D36B5F2F2671E
MSI (s) (54:B4) [16:04:21:526]: Setting cached product context: machine assigned for product: 05D5D9B00351F69418FFBCB1A492F8AC
MSI (s) (54:B4) [16:04:21:526]: Using cached product context: machine assigned for product: 05D5D9B00351F69418FFBCB1A492F8AC
MSI (s) (54:B4) [16:04:21:526]: Setting cached product context: machine assigned for product: 11F8B97FEC2EF7450C9BA9C0E20C5DD1
MSI (s) (54:B4) [16:04:21:526]: Using cached product context: machine assigned for product: 11F8B97FEC2EF7450C9BA9C0E20C5DD1
MSI (s) (54:B4) [16:04:21:526]: Setting cached product context: machine assigned for product: 180FF20CD1B3AB74AA86730DAEB4575C
MSI (s) (54:B4) [16:04:21:526]: Using cached product context: machine assigned for product: 180FF20CD1B3AB74AA86730DAEB4575C
MSI (s) (54:B4) [16:04:21:526]: Setting cached product context: machine assigned for product: 18774F2FD1E4D8CD7145BFB9599E23D1
MSI (s) (54:B4) [16:04:21:526]: Using cached product context: machine assigned for product: 18774F2FD1E4D8CD7145BFB9599E23D1
MSI (s) (54:B4) [16:04:21:526]: Setting cached product context: machine assigned for product: 1926E8D15D0BCE53481466615F760A7F
MSI (s) (54:B4) [16:04:21:526]: Using cached product context: machine assigned for product: 1926E8D15D0BCE53481466615F760A7F
MSI (s) (54:B4) [16:04:21:526]: Setting cached product context: machine assigned for product: 1D5E3C0FEDA1E123187686FED06E995A
MSI (s) (54:B4) [16:04:21:526]: Using cached product context: machine assigned for product: 1D5E3C0FEDA1E123187686FED06E995A
MSI (s) (54:B4) [16:04:21:526]: Setting cached product context: machine assigned for product: 21B078C62FF6CF86C8B3DD71B7FBF329
MSI (s) (54:B4) [16:04:21:526]: Using cached product context: machine assigned for product: 21B078C62FF6CF86C8B3DD71B7FBF329
MSI (s) (54:B4) [16:04:21:526]: Setting cached product context: machine assigned for product: 254F774C98541CFB03B4226C9306CF04
MSI (s) (54:B4) [16:04:21:526]: Using cached product context: machine assigned for product: 254F774C98541CFB03B4226C9306CF04
MSI (s) (54:B4) [16:04:21:526]: Setting cached product context: machine assigned for product: 2D4102660540DE73BAEA51C78821B7BE
MSI (s) (54:B4) [16:04:21:526]: Using cached product context: machine assigned for product: 2D4102660540DE73BAEA51C78821B7BE
MSI (s) (54:B4) [16:04:21:526]: Setting cached product context: machine assigned for product: 304DE9D5ED490AB31B6D174FDB4A216E
MSI (s) (54:B4) [16:04:21:526]: Using cached product context: machine assigned for product: 304DE9D5ED490AB31B6D174FDB4A216E
MSI (s) (54:B4) [16:04:21:526]: Setting cached product context: machine assigned for product: 38513AEF7A03159017C8FA57CD0B301B
MSI (s) (54:B4) [16:04:21:526]: Using cached product context: machine assigned for product: 38513AEF7A03159017C8FA57CD0B301B
MSI (s) (54:B4) [16:04:21:526]: Setting cached product context: machine assigned for product: 3e43b73803c7c394f8a6b2f0402e19c2
MSI (s) (54:B4) [16:04:21:526]: Using cached product context: machine assigned for product: 3e43b73803c7c394f8a6b2f0402e19c2
MSI (s) (54:B4) [16:04:21:526]: Setting cached product context: machine assigned for product: 4604FCE7956CA964FB812D9F0833E243
MSI (s) (54:B4) [16:04:21:526]: Using cached product context: machine assigned for product: 4604FCE7956CA964FB812D9F0833E243
MSI (s) (54:B4) [16:04:21:526]: Setting cached product context: machine assigned for product: 4896B46DF242CB230B805782605ECF44
MSI (s) (54:B4) [16:04:21:526]: Using cached product context: machine assigned for product: 4896B46DF242CB230B805782605ECF44
MSI (s) (54:B4) [16:04:21:526]: Setting cached product context: machine assigned for product: 4EA42A62D9304AC4784BF2381208520F
MSI (s) (54:B4) [16:04:21:526]: Using cached product context: machine assigned for product: 4EA42A62D9304AC4784BF2381208520F
MSI (s) (54:B4) [16:04:21:526]: Setting cached product context: machine assigned for product: 4F8B2F383FC59EB479275934AE4ECAF5
MSI (s) (54:B4) [16:04:21:526]: Using cached product context: machine assigned for product: 4F8B2F383FC59EB479275934AE4ECAF5
MSI (s) (54:B4) [16:04:21:526]: Setting cached product context: machine assigned for product: 50EE24DF9F81F95439D577E0573BEB5E
MSI (s) (54:B4) [16:04:21:526]: Using cached product context: machine assigned for product: 50EE24DF9F81F95439D577E0573BEB5E
MSI (s) (54:B4) [16:04:21:526]: Setting cached product context: machine assigned for product: 5795C037F268239B2BC778C970C13A08
MSI (s) (54:B4) [16:04:21:526]: Using cached product context: machine assigned for product: 5795C037F268239B2BC778C970C13A08
MSI (s) (54:B4) [16:04:21:526]: Setting cached product context: machine assigned for product: 5BC18FFB7C8E4814BF4B47DABF6CCCBC
MSI (s) (54:B4) [16:04:21:526]: Using cached product context: machine assigned for product: 5BC18FFB7C8E4814BF4B47DABF6CCCBC
MSI (s) (54:B4) [16:04:21:526]: Setting cached product context: machine assigned for product: 6905521ABB4A6024BA00865CCF12A228
MSI (s) (54:B4) [16:04:21:526]: Using cached product context: machine assigned for product: 6905521ABB4A6024BA00865CCF12A228
MSI (s) (54:B4) [16:04:21:526]: Setting cached product context: machine assigned for product: 699277C63FFBC8C368B03B4DF80FD556
MSI (s) (54:B4) [16:04:21:526]: Using cached product context: machine assigned for product: 699277C63FFBC8C368B03B4DF80FD556
MSI (s) (54:B4) [16:04:21:526]: Setting cached product context: machine assigned for product: 7A5E057F1CCBD6F1F4AD5C3B941F52C4
MSI (s) (54:B4) [16:04:21:526]: Using cached product context: machine assigned for product: 7A5E057F1CCBD6F1F4AD5C3B941F52C4
MSI (s) (54:B4) [16:04:21:526]: Setting cached product context: machine assigned for product: 8A84FEFC8BFBCAE3B85AEDF4A82A76EC
MSI (s) (54:B4) [16:04:21:526]: Using cached product context: machine assigned for product: 8A84FEFC8BFBCAE3B85AEDF4A82A76EC
MSI (s) (54:B4) [16:04:21:526]: Setting cached product context: machine assigned for product: A3227778CC3EA21A92CCCF1FE7E6AC49
MSI (s) (54:B4) [16:04:21:526]: Using cached product context: machine assigned for product: A3227778CC3EA21A92CCCF1FE7E6AC49
MSI (s) (54:B4) [16:04:21:526]: Setting cached product context: machine assigned for product: A59BD76D1509B2943EFEBB46AFD91634
MSI (s) (54:B4) [16:04:21:526]: Using cached product context: machine assigned for product: A59BD76D1509B2943EFEBB46AFD91634
MSI (s) (54:B4) [16:04:21:526]: Setting cached product context: machine assigned for product: A9BF3F4605296D2B004B05EB3085EA8E
MSI (s) (54:B4) [16:04:21:526]: Using cached product context: machine assigned for product: A9BF3F4605296D2B004B05EB3085EA8E
MSI (s) (54:B4) [16:04:21:526]: Setting cached product context: machine assigned for product: BD4F8A4AD69C2CB49B91CDDD1FC3064C
MSI (s) (54:B4) [16:04:21:526]: Using cached product context: machine assigned for product: BD4F8A4AD69C2CB49B91CDDD1FC3064C
MSI (s) (54:B4) [16:04:21:526]: Setting cached product context: machine assigned for product: BD90EDF6117DB39580329DD9A2572772
MSI (s) (54:B4) [16:04:21:526]: Using cached product context: machine assigned for product: BD90EDF6117DB39580329DD9A2572772
MSI (s) (54:B4) [16:04:21:526]: Setting cached product context: machine assigned for product: BE71C024463DB97429641739532F4E41
MSI (s) (54:B4) [16:04:21:526]: Using cached product context: machine assigned for product: BE71C024463DB97429641739532F4E41
MSI (s) (54:B4) [16:04:21:526]: Setting cached product context: machine assigned for product: C0AC3AE6520A84DF9D2C16199B94E134
MSI (s) (54:B4) [16:04:21:526]: Using cached product context: machine assigned for product: C0AC3AE6520A84DF9D2C16199B94E134
MSI (s) (54:B4) [16:04:21:526]: Setting cached product context: machine assigned for product: C18E428E4A08FFD35B9F84249AFFF5F7
MSI (s) (54:B4) [16:04:21:526]: Using cached product context: machine assigned for product: C18E428E4A08FFD35B9F84249AFFF5F7
MSI (s) (54:B4) [16:04:21:526]: Setting cached product context: machine assigned for product: CA4834C0BD205E4B5E73EEC62F3229FC
MSI (s) (54:B4) [16:04:21:526]: Using cached product context: machine assigned for product: CA4834C0BD205E4B5E73EEC62F3229FC
MSI (s) (54:B4) [16:04:21:526]: Setting cached product context: machine assigned for product: D179832C9505F2B47B06BB32A74F02A6
MSI (s) (54:B4) [16:04:21:526]: Using cached product context: machine assigned for product: D179832C9505F2B47B06BB32A74F02A6
MSI (s) (54:B4) [16:04:21:526]: Setting cached product context: machine assigned for product: DF56E47B74CC5C14B49897A1F31649D2
MSI (s) (54:B4) [16:04:21:526]: Using cached product context: machine assigned for product: DF56E47B74CC5C14B49897A1F31649D2
MSI (s) (54:B4) [16:04:21:526]: Setting cached product context: machine assigned for product: F33B08125223E324BB1C7789FC3DDCF1
MSI (s) (54:B4) [16:04:21:526]: Using cached product context: machine assigned for product: F33B08125223E324BB1C7789FC3DDCF1
MSI (s) (54:B4) [16:04:21:526]: Setting cached product context: machine assigned for product: F60730A4A66673047777F5728467D401
MSI (s) (54:B4) [16:04:21:526]: Using cached product context: machine assigned for product: F60730A4A66673047777F5728467D401
MSI (s) (54:B4) [16:04:21:526]: Setting cached product context: machine assigned for product: F7322F45C810B3848848F90C8D88043C
MSI (s) (54:B4) [16:04:21:526]: Using cached product context: machine assigned for product: F7322F45C810B3848848F90C8D88043C
MSI (s) (54:B4) [16:04:21:526]: Note: 1: 2203 2: C:\Windows\Installer\inprogressinstallinfo.ipi 3: -2147287038
MSI (s) (54:B4) [16:04:21:526]: Machine policy value 'LimitSystemRestoreCheckpointing' is 0
MSI (s) (54:B4) [16:04:21:526]: Note: 1: 1715 2: UniversalForwarder
MSI (s) (54:B4) [16:04:21:526]: Note: 1: 2205 2: 3: Error
MSI (s) (54:B4) [16:04:21:526]: Note: 1: 2228 2: 3: Error 4: SELECT `Message` FROM `Error` WHERE `Error` = 1715
MSI (s) (54:B4) [16:04:21:526]: Calling SRSetRestorePoint API. dwRestorePtType: 0, dwEventType: 102, llSequenceNumber: 0, szDescription: "Installed UniversalForwarder".
MSI (s) (54:B4) [16:04:21:526]: The call to SRSetRestorePoint API failed. Returned status: 0. GetLastError() returned: 127
MSI (s) (54:B4) [16:04:21:526]: File will have security applied from OpCode.
MSI (s) (54:B4) [16:04:21:573]: SOFTWARE RESTRICTION POLICY: Verifying package --> 'D:\Install\splunkforwarder-6.2.2-255606-x64-release.msi' against software restriction policy
MSI (s) (54:B4) [16:04:21:573]: SOFTWARE RESTRICTION POLICY: D:\Install\splunkforwarder-6.2.2-255606-x64-release.msi has a digital signature
MSI (s) (54:B4) [16:04:21:698]: SOFTWARE RESTRICTION POLICY: D:\Install\splunkforwarder-6.2.2-255606-x64-release.msi is permitted to run at the 'unrestricted' authorization level.
MSI (s) (54:B4) [16:04:21:698]: Creating MSIHANDLE (61) of type 790542 for thread 9652
MSI (s) (54:B4) [16:04:21:698]: MSCOREE not loaded loading copy from system32
MSI (s) (54:B4) [16:04:21:698]: End dialog not enabled
MSI (s) (54:B4) [16:04:21:698]: Original package ==> D:\Install\splunkforwarder-6.2.2-255606-x64-release.msi
MSI (s) (54:B4) [16:04:21:698]: Package we're running from ==> C:\Windows\Installer\2a7a5cfb.msi
MSI (s) (54:B4) [16:04:21:713]: APPCOMPAT: Compatibility mode property overrides found.
MSI (s) (54:B4) [16:04:21:713]: APPCOMPAT: looking for appcompat database entry with ProductCode '{D77B0D44-D35B-4BD3-A54E-89CBAE2086E6}'.
MSI (s) (54:B4) [16:04:21:713]: APPCOMPAT: no matching ProductCode found in database.
MSI (s) (54:B4) [16:04:21:713]: Machine policy value 'TransformsSecure' is 1
MSI (s) (54:B4) [16:04:21:713]: Machine policy value 'DisablePatch' is 0
MSI (s) (54:B4) [16:04:21:713]: Machine policy value 'AllowLockdownPatch' is 0
MSI (s) (54:B4) [16:04:21:713]: Machine policy value 'DisableMsi' is 1
MSI (s) (54:B4) [16:04:21:713]: Machine policy value 'AlwaysInstallElevated' is 0
MSI (s) (54:B4) [16:04:21:713]: User policy value 'AlwaysInstallElevated' is 0
MSI (s) (54:B4) [16:04:21:713]: Rejecting product '{D77B0D44-D35B-4BD3-A54E-89CBAE2086E6}': Non-assigned apps are disabled for non-admin users.
MSI (s) (54:B4) [16:04:21:713]: Machine policy value 'DisableLUAPatching' is 0
MSI (s) (54:B4) [16:04:21:713]: Machine policy value 'DisableFlyWeightPatching' is 0
MSI (s) (54:B4) [16:04:21:713]: Enabling baseline caching for this transaction since all active patches are MSI 3.0 style MSPs or at least one MSI 3.0 minor update patch is active
MSI (s) (54:B4) [16:04:21:713]: APPCOMPAT: looking for appcompat database entry with ProductCode '{D77B0D44-D35B-4BD3-A54E-89CBAE2086E6}'.
MSI (s) (54:B4) [16:04:21:713]: APPCOMPAT: no matching ProductCode found in database.
MSI (s) (54:B4) [16:04:21:713]: Transforms are not secure.
MSI (s) (54:B4) [16:04:21:713]: PROPERTY CHANGE: Adding MsiLogFileLocation property. Its value is 'C:\Users\jjb01\AppData\Local\Temp\3\MSIda742.LOG'.
MSI (s) (54:B4) [16:04:21:713]: Command Line: INSTALLDIR=C:\Program Files\SplunkUniversalForwarder\ TARGETDIR=D:\ AGREETOLICENSE=Yes CURRENTDIRECTORY=D:\Install CLIENTUILEVEL=0 CLIENTPROCESSID=9560 USERNAME=Windows User SOURCEDIR=D:\Install\ ACTION=INSTALL EXECUTEACTION=INSTALL ROOTDRIVE=D:\ INSTALLLEVEL=1 SECONDSEQUENCE=1 WIXUI_INSTALLDIR_VALID=1 DEPLOYMENT_SERVER=172.16.1.103:8089 RECEIVING_INDEXER=172.16.1.103:9997 ADDLOCAL=Complete ACTION=INSTALL
MSI (s) (54:B4) [16:04:21:713]: PROPERTY CHANGE: Adding PackageCode property. Its value is '{1586EC18-33AD-4646-B29D-F56E77D62B32}'.
MSI (s) (54:B4) [16:04:21:713]: Product Code passed to Engine.Initialize: ''
MSI (s) (54:B4) [16:04:21:713]: Product Code from property table before transforms: '{D77B0D44-D35B-4BD3-A54E-89CBAE2086E6}'
MSI (s) (54:B4) [16:04:21:713]: Product Code from property table after transforms: '{D77B0D44-D35B-4BD3-A54E-89CBAE2086E6}'
MSI (s) (54:B4) [16:04:21:713]: Product not registered: beginning first-time install
MSI (s) (54:B4) [16:04:21:713]: Product {D77B0D44-D35B-4BD3-A54E-89CBAE2086E6} is not managed.
MSI (s) (54:B4) [16:04:21:713]: Machine policy value 'AlwaysInstallElevated' is 0
MSI (s) (54:B4) [16:04:21:713]: User policy value 'AlwaysInstallElevated' is 0
MSI (s) (54:B4) [16:04:21:713]: MSI_LUA: Elevation required to install product, will prompt for credentials
MSI (s) (54:B4) [16:04:21:713]: MSI_LUA: Entering Credential Request. hwnd = 4653422, MsiAction = 0, productname = UniversalForwarder, version = 6.2.2.255606, language = 1033, manufacturer = Splunk, Inc.
MSI (s) (54:B4) [16:04:21:713]: MSI_LUA: (continued)... packagepath = C:\Windows\Installer\2a7a5cfb.msi, packagesource = D:\Install\splunkforwarder-6.2.2-255606-x64-release.msi, dwUpdates = 0
MSI (s) (54:B4) [16:04:25:934]: MSI_LUA: Credential Request return = 0x0
MSI (s) (54:B4) [16:04:25:934]: MSI_LUA: Elevated credential consent provided. Install will run elevated
MSI (s) (54:B4) [16:04:25:934]: Note: 1: 2205 2: 3: MsiPackageCertificate
MSI (s) (54:B4) [16:04:25:934]: Note: 1: 2205 2: 3: MsiDigitalCertificate
MSI (s) (54:B4) [16:04:25:934]: PROPERTY CHANGE: Adding ProductState property. Its value is '-1'.
MSI (s) (54:B4) [16:04:25:934]: Entering CMsiConfigurationManager::SetLastUsedSource.
MSI (s) (54:B4) [16:04:25:934]: User policy value 'SearchOrder' is 'nmu'
MSI (s) (54:B4) [16:04:25:934]: Adding new sources is allowed.
MSI (s) (54:B4) [16:04:25:934]: PROPERTY CHANGE: Adding PackagecodeChanging property. Its value is '1'.
MSI (s) (54:B4) [16:04:25:934]: Package name extracted from package path: 'splunkforwarder-6.2.2-255606-x64-release.msi'
MSI (s) (54:B4) [16:04:25:934]: Package to be registered: 'splunkforwarder-6.2.2-255606-x64-release.msi'
MSI (s) (54:B4) [16:04:25:934]: Note: 1: 2205 2: 3: Error
MSI (s) (54:B4) [16:04:25:934]: Note: 1: 2262 2: AdminProperties 3: -2147287038
MSI (s) (54:B4) [16:04:25:934]: Machine policy value 'AlwaysInstallElevated' is 0
MSI (s) (54:B4) [16:04:25:934]: User policy value 'AlwaysInstallElevated' is 0
MSI (s) (54:B4) [16:04:25:934]: Product installation will be elevated because user provided elevated credentials and product is being installed per-machine.
MSI (s) (54:B4) [16:04:25:934]: Running product '{D77B0D44-D35B-4BD3-A54E-89CBAE2086E6}' with elevated privileges: Product is assigned.
MSI (s) (54:B4) [16:04:25:934]: PROPERTY CHANGE: Adding INSTALLDIR property. Its value is 'C:\Program Files\SplunkUniversalForwarder\'.
MSI (s) (54:B4) [16:04:25:934]: PROPERTY CHANGE: Adding TARGETDIR property. Its value is 'D:\'.
MSI (s) (54:B4) [16:04:25:934]: PROPERTY CHANGE: Modifying AGREETOLICENSE property. Its current value is 'No'. Its new value: 'Yes'.
MSI (s) (54:B4) [16:04:25:934]: PROPERTY CHANGE: Adding CURRENTDIRECTORY property. Its value is 'D:\Install'.
MSI (s) (54:B4) [16:04:25:934]: PROPERTY CHANGE: Adding CLIENTUILEVEL property. Its value is '0'.
MSI (s) (54:B4) [16:04:25:934]: PROPERTY CHANGE: Adding CLIENTPROCESSID property. Its value is '9560'.
MSI (s) (54:B4) [16:04:25:934]: PROPERTY CHANGE: Adding USERNAME property. Its value is 'Windows User'.
MSI (s) (54:B4) [16:04:25:934]: PROPERTY CHANGE: Adding SOURCEDIR property. Its value is 'D:\Install\'.
MSI (s) (54:B4) [16:04:25:934]: PROPERTY CHANGE: Adding ACTION property. Its value is 'INSTALL'.
MSI (s) (54:B4) [16:04:25:934]: PROPERTY CHANGE: Adding EXECUTEACTION property. Its value is 'INSTALL'.
MSI (s) (54:B4) [16:04:25:934]: PROPERTY CHANGE: Adding ROOTDRIVE property. Its value is 'D:\'.
MSI (s) (54:B4) [16:04:25:934]: PROPERTY CHANGE: Adding INSTALLLEVEL property. Its value is '1'.
MSI (s) (54:B4) [16:04:25:934]: PROPERTY CHANGE: Adding SECONDSEQUENCE property. Its value is '1'.
MSI (s) (54:B4) [16:04:25:934]: PROPERTY CHANGE: Adding WIXUI_INSTALLDIR_VALID property. Its value is '1'.
MSI (s) (54:B4) [16:04:25:934]: PROPERTY CHANGE: Adding DEPLOYMENT_SERVER property. Its value is '172.16.1.103:8089'.
MSI (s) (54:B4) [16:04:25:934]: PROPERTY CHANGE: Adding RECEIVING_INDEXER property. Its value is '172.16.1.103:9997'.
MSI (s) (54:B4) [16:04:25:934]: PROPERTY CHANGE: Adding ADDLOCAL property. Its value is 'Complete'.
MSI (s) (54:B4) [16:04:25:934]: Machine policy value 'DisableAutomaticApplicationShutdown' is 0
MSI (s) (54:B4) [16:04:25:934]: RESTART MANAGER: Disabled by MSIRESTARTMANAGERCONTROL property; Windows Installer will use the built-in FilesInUse functionality.
MSI (s) (54:B4) [16:04:25:934]: Engine has iefSecondSequence set to true.
MSI (s) (54:B4) [16:04:25:934]: TRANSFORMS property is now:
MSI (s) (54:B4) [16:04:25:934]: PROPERTY CHANGE: Deleting SOURCEDIR property. Its current value is 'D:\Install\'.
MSI (s) (54:B4) [16:04:25:934]: PROPERTY CHANGE: Adding VersionDatabase property. Its value is '200'.
MSI (s) (54:B4) [16:04:25:934]: SHELL32::SHGetFolderPath returned: C:\Users\jjb01\AppData\Roaming
MSI (s) (54:B4) [16:04:25:934]: SHELL32::SHGetFolderPath returned: C:\Users\jjb01\Favorites
MSI (s) (54:B4) [16:04:25:934]: SHELL32::SHGetFolderPath returned: C:\Users\jjb01\AppData\Roaming\Microsoft\Windows\Network Shortcuts
MSI (s) (54:B4) [16:04:25:934]: SHELL32::SHGetFolderPath returned: C:\Users\jjb01\Documents
MSI (s) (54:B4) [16:04:25:934]: SHELL32::SHGetFolderPath returned: C:\Users\jjb01\AppData\Roaming\Microsoft\Windows\Printer Shortcuts
MSI (s) (54:B4) [16:04:25:934]: SHELL32::SHGetFolderPath returned: C:\Users\jjb01\AppData\Roaming\Microsoft\Windows\Recent
MSI (s) (54:B4) [16:04:25:934]: SHELL32::SHGetFolderPath returned: C:\Users\jjb01\AppData\Roaming\Microsoft\Windows\SendTo
MSI (s) (54:B4) [16:04:25:934]: SHELL32::SHGetFolderPath returned: C:\Users\jjb01\AppData\Roaming\Microsoft\Windows\Templates
MSI (s) (54:B4) [16:04:25:934]: SHELL32::SHGetFolderPath returned: C:\ProgramData
MSI (s) (54:B4) [16:04:25:934]: SHELL32::SHGetFolderPath returned: C:\Users\jjb01\AppData\Local
MSI (s) (54:B4) [16:04:25:934]: SHELL32::SHGetFolderPath returned: C:\Users\jjb01\Pictures
MSI (s) (54:B4) [16:04:25:934]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools
MSI (s) (54:B4) [16:04:25:934]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
MSI (s) (54:B4) [16:04:25:950]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Start Menu\Programs
MSI (s) (54:B4) [16:04:25:950]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Start Menu
MSI (s) (54:B4) [16:04:25:950]: SHELL32::SHGetFolderPath returned: C:\Users\Public\Desktop
MSI (s) (54:B4) [16:04:25:950]: SHELL32::SHGetFolderPath returned: C:\Users\jjb01\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
MSI (s) (54:B4) [16:04:25:950]: SHELL32::SHGetFolderPath returned: C:\Users\jjb01\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
MSI (s) (54:B4) [16:04:25:950]: SHELL32::SHGetFolderPath returned: C:\Users\jjb01\AppData\Roaming\Microsoft\Windows\Start Menu\Programs
MSI (s) (54:B4) [16:04:25:950]: SHELL32::SHGetFolderPath returned: C:\Users\jjb01\AppData\Roaming\Microsoft\Windows\Start Menu
MSI (s) (54:B4) [16:04:25:950]: SHELL32::SHGetFolderPath returned: C:\Users\jjb01\Desktop
MSI (s) (54:B4) [16:04:25:950]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Templates
MSI (s) (54:B4) [16:04:25:950]: SHELL32::SHGetFolderPath returned: C:\Windows\Fonts
MSI (s) (54:B4) [16:04:25:950]: Note: 1: 2898 2: MS Sans Serif 3: MS Sans Serif 4: 0 5: 16
MSI (s) (54:B4) [16:04:25:950]: MSI_LUA: Setting AdminUser property to 1 because this is the client or the user has already permitted elevation
MSI (s) (54:B4) [16:04:25:950]: PROPERTY CHANGE: Adding AdminUser property. Its value is '1'.
MSI (s) (54:B4) [16:04:25:950]: MSI_LUA: Setting MsiRunningElevated property to 1 because the install is already running elevated.
MSI (s) (54:B4) [16:04:25:950]: PROPERTY CHANGE: Adding MsiRunningElevated property. Its value is '1'.
MSI (s) (54:B4) [16:04:25:950]: PROPERTY CHANGE: Adding Privileged property. Its value is '1'.
MSI (s) (54:B4) [16:04:25:950]: Note: 1: 1402 2: HKEY_CURRENT_USER\Software\Microsoft\MS Setup (ACME)\User Info 3: 2
MSI (s) (54:B4) [16:04:25:950]: PROPERTY CHANGE: Adding DATABASE property. Its value is 'C:\Windows\Installer\2a7a5cfb.msi'.
MSI (s) (54:B4) [16:04:25:950]: PROPERTY CHANGE: Adding OriginalDatabase property. Its value is 'D:\Install\splunkforwarder-6.2.2-255606-x64-release.msi'.
MSI (s) (54:B4) [16:04:25:950]: Machine policy value 'MsiDisableEmbeddedUI' is 0
MSI (s) (54:B4) [16:04:25:950]: EEUI - Disabling MsiEmbeddedUI for service because it's not a quiet/basic install
MSI (s) (54:B4) [16:04:25:950]: Note: 1: 2205 2: 3: PatchPackage
MSI (s) (54:B4) [16:04:25:950]: Machine policy value 'DisableRollback' is 0
MSI (s) (54:B4) [16:04:25:950]: User policy value 'DisableRollback' is 0
MSI (s) (54:B4) [16:04:25:950]: PROPERTY CHANGE: Adding UILevel property. Its value is '5'.
MSI (s) (54:B4) [16:04:25:950]: PROPERTY CHANGE: Adding Preselected property. Its value is '1'.
MSI (s) (54:B4) [16:04:25:950]: Note: 1: 2205 2: 3: LaunchCondition
MSI (s) (54:B4) [16:04:25:950]: Note: 1: 2228 2: 3: LaunchCondition 4: SELECT `Condition` FROM `LaunchCondition`
MSI (s) (54:B4) [16:04:25:950]: APPCOMPAT: [DetectVersionLaunchCondition] Failed to initialize pRecErr.
MSI (s) (54:B4) [16:04:25:950]: Doing action: INSTALL
MSI (s) (54:B4) [16:04:25:950]: Note: 1: 2205 2: 3: ActionText
Action 16:04:25: INSTALL.
Action start 16:04:25: INSTALL.
MSI (s) (54:B4) [16:04:25:950]: Running ExecuteSequence
MSI (s) (54:B4) [16:04:25:950]: Doing action: SetAllUsers
MSI (s) (54:B4) [16:04:25:950]: Note: 1: 2205 2: 3: ActionText
Action 16:04:25: SetAllUsers.
Action start 16:04:25: SetAllUsers.
MSI (s) (54:B4) [16:04:25:965]: Creating MSIHANDLE (62) of type 790542 for thread 9652
MSI (s) (54:68) [16:04:25:965]: Invoking remote custom action. DLL: C:\Windows\Installer\MSI2E35.tmp, Entrypoint: SetAllUsersCA
MSI (s) (54:74) [16:04:25:965]: Generating random cookie.
MSI (s) (54:74) [16:04:25:965]: Created Custom Action Server with PID 9708 (0x25EC).
MSI (s) (54:50) [16:04:25:981]: Running as a service.
MSI (s) (54:50) [16:04:25:981]: Hello, I'm your 64bit Impersonated custom action server.
MSI (s) (54!7C) [16:04:25:996]: Creating MSIHANDLE (63) of type 790541 for thread 4732
MSI (s) (54!7C) [16:04:25:996]: Creating MSIHANDLE (64) of type 790531 for thread 4732
SetAllUsers: Entering SetAllUsers in C:\Windows\Installer\MSI2E35.tmp, version 0.0.0.0
MSI (s) (54!7C) [16:04:25:996]: Closing MSIHANDLE (64) of type 790531 for thread 4732
MSI (s) (54!7C) [16:04:25:996]: Creating MSIHANDLE (65) of type 790531 for thread 4732
SetAllUsers: Info: Registry setting for current user is not found.
MSI (s) (54!7C) [16:04:25:996]: Closing MSIHANDLE (65) of type 790531 for thread 4732
MSI (s) (54!7C) [16:04:25:996]: Creating MSIHANDLE (66) of type 790531 for thread 4732
SetAllUsers: Info: ALLUSERS value for the existing installation: -1.
MSI (s) (54!7C) [16:04:25:996]: Closing MSIHANDLE (66) of type 790531 for thread 4732
MSI (s) (54!7C) [16:04:25:996]: Creating MSIHANDLE (67) of type 790531 for thread 4732
SetAllUsers: Info: Set ALLUSERS property to 1.
MSI (s) (54!7C) [16:04:25:996]: Closing MSIHANDLE (67) of type 790531 for thread 4732
MSI (s) (54!7C) [16:04:25:996]: Creating MSIHANDLE (68) of type 790531 for thread 4732
SetAllUsers: Info: Leave SetAllUsers: 0x0.
MSI (s) (54!7C) [16:04:25:996]: Closing MSIHANDLE (68) of type 790531 for thread 4732
MSI (s) (54!7C) [16:04:25:996]: Closing MSIHANDLE (63) of type 790541 for thread 4732
MSI (s) (54:68) [16:04:25:996]: Closing MSIHANDLE (62) of type 790542 for thread 9652
Action ended 16:04:25: SetAllUsers. Return value 1.
MSI (s) (54:B4) [16:04:25:996]: Doing action: FindRelatedProducts
MSI (s) (54:B4) [16:04:25:996]: Note: 1: 2205 2: 3: ActionText
Action 16:04:25: FindRelatedProducts. Searching for related applications
Action start 16:04:26: FindRelatedProducts.
MSI (s) (54:B4) [16:04:26:012]: Skipping FindRelatedProducts action: already done on client side
Action ended 16:04:26: FindRelatedProducts. Return value 0.
MSI (s) (54:B4) [16:04:26:012]: Skipping action: CheckSupportedOsXP (condition is false)
MSI (s) (54:B4) [16:04:26:012]: Doing action: GetPreviousSettings
MSI (s) (54:B4) [16:04:26:012]: Note: 1: 2205 2: 3: ActionText
Action 16:04:26: GetPreviousSettings.
Action start 16:04:26: GetPreviousSettings.
MSI (s) (54:B4) [16:04:26:012]: Creating MSIHANDLE (69) of type 790542 for thread 9652
MSI (s) (54:CC) [16:04:26:012]: Invoking remote custom action. DLL: C:\Windows\Installer\MSI2E65.tmp, Entrypoint: GetPreviousSettingsCA
MSI (s) (54!28) [16:04:26:012]: Creating MSIHANDLE (70) of type 790541 for thread 10280
MSI (s) (54!28) [16:04:26:012]: Creating MSIHANDLE (71) of type 790531 for thread 10280
GetPreviousSettings: Entering GetPreviousSettings in C:\Windows\Installer\MSI2E65.tmp, version 0.0.0.0
MSI (s) (54!28) [16:04:26:012]: Closing MSIHANDLE (71) of type 790531 for thread 10280
MSI (s) (54!28) [16:04:26:028]: Creating MSIHANDLE (72) of type 790531 for thread 10280
GetPreviousSettings: Info: no installed splunk products found
MSI (s) (54!28) [16:04:26:028]: Closing MSIHANDLE (72) of type 790531 for thread 10280
MSI (s) (54!28) [16:04:26:028]: Creating MSIHANDLE (73) of type 790531 for thread 10280
GetPreviousSettings: Info: Leave GetPreviousSettings: 0x0.
MSI (s) (54!28) [16:04:26:028]: Closing MSIHANDLE (73) of type 790531 for thread 10280
MSI (s) (54!28) [16:04:26:028]: Closing MSIHANDLE (70) of type 790541 for thread 10280
MSI (s) (54:CC) [16:04:26:028]: Closing MSIHANDLE (69) of type 790542 for thread 9652
Action ended 16:04:26: GetPreviousSettings. Return value 1.
MSI (s) (54:B4) [16:04:26:028]: Skipping action: Check32BitOn64 (condition is false)
MSI (s) (54:B4) [16:04:26:028]: Doing action: CheckSupportedOs
MSI (s) (54:B4) [16:04:26:028]: Note: 1: 2205 2: 3: ActionText
Action 16:04:26: CheckSupportedOs.
Action start 16:04:26: CheckSupportedOs.
MSI (s) (54:B4) [16:04:26:028]: Creating MSIHANDLE (74) of type 790542 for thread 9652
MSI (s) (54:44) [16:04:26:028]: Invoking remote custom action. DLL: C:\Windows\Installer\MSI2E76.tmp, Entrypoint: CheckSupportedOsCA
MSI (s) (54!B8) [16:04:26:028]: Creating MSIHANDLE (75) of type 790541 for thread 10936
MSI (s) (54!B8) [16:04:26:028]: Creating MSIHANDLE (76) of type 790531 for thread 10936
CheckSupportedOs: Entering CheckSupportedOs in C:\Windows\Installer\MSI2E76.tmp, version 0.0.0.0
MSI (s) (54!B8) [16:04:26:028]: Closing MSIHANDLE (76) of type 790531 for thread 10936
MSI (s) (54!B8) [16:04:26:028]: Closing MSIHANDLE (75) of type 790541 for thread 10936
MSI (s) (54:44) [16:04:26:043]: Closing MSIHANDLE (74) of type 790542 for thread 9652
Action ended 16:04:26: CheckSupportedOs. Return value 1.
MSI (s) (54:B4) [16:04:26:043]: Skipping action: CheckSupportedOsReturn (condition is false)
MSI (s) (54:B4) [16:04:26:043]: Skipping action: PreventDowngrading (condition is false)
MSI (s) (54:B4) [16:04:26:043]: Doing action: ValidateProductID
MSI (s) (54:B4) [16:04:26:043]: Note: 1: 2205 2: 3: ActionText
Action 16:04:26: ValidateProductID.
Action start 16:04:26: ValidateProductID.
Action ended 16:04:26: ValidateProductID. Return value 1.
MSI (s) (54:B4) [16:04:26:043]: Doing action: CostInitialize
MSI (s) (54:B4) [16:04:26:043]: Note: 1: 2205 2: 3: ActionText
Action 16:04:26: CostInitialize. Computing space requirements
Action start 16:04:26: CostInitialize.
MSI (s) (54:B4) [16:04:26:043]: Machine policy value 'MaxPatchCacheSize' is 10
MSI (s) (54:B4) [16:04:26:043]: Baseline: Sorting baselines for {D77B0D44-D35B-4BD3-A54E-89CBAE2086E6}.
MSI (s) (54:B4) [16:04:26:043]: Baseline: New baseline 6.2.2 from transaction.
MSI (s) (54:B4) [16:04:26:043]: Baseline: Sorted order Native: Order 0.
MSI (s) (54:B4) [16:04:26:043]: Baseline Data Table:
MSI (s) (54:B4) [16:04:26:043]: ProductCode: {D77B0D44-D35B-4BD3-A54E-89CBAE2086E6} Version: 6.2.2 Attributes: 0 PatchId: Native BaselineId: -2147483648 Order: 0
MSI (s) (54:B4) [16:04:26:043]: Baseline File Table:
MSI (s) (54:B4) [16:04:26:043]: PROPERTY CHANGE: Adding CostingComplete property. Its value is '0'.
MSI (s) (54:B4) [16:04:26:043]: Note: 1: 2205 2: 3: Patch
MSI (s) (54:B4) [16:04:26:043]: Note: 1: 2205 2: 3: PatchPackage
MSI (s) (54:B4) [16:04:26:043]: Note: 1: 2205 2: 3: MsiPatchHeaders
MSI (s) (54:B4) [16:04:26:043]: Note: 1: 2205 2: 3: __MsiPatchFileList
MSI (s) (54:B4) [16:04:26:043]: Note: 1: 2205 2: 3: PatchPackage
MSI (s) (54:B4) [16:04:26:043]: Note: 1: 2228 2: 3: PatchPackage 4: SELECT `DiskId`, `PatchId`, `LastSequence` FROM `Media`, `PatchPackage` WHERE `Media`.`DiskId`=`PatchPackage`.`Media_` ORDER BY `DiskId`
MSI (s) (54:B4) [16:04:26:043]: Delta compression fallback method for this product transaction is 'MSI 2.0 legacy obsolescence'
MSI (s) (54:B4) [16:04:26:043]: Note: 1: 2205 2: 3: Patch
Action ended 16:04:26: CostInitialize. Return value 1.
MSI (s) (54:B4) [16:04:26:043]: Doing action: FileCost
MSI (s) (54:B4) [16:04:26:043]: Note: 1: 2205 2: 3: ActionText
Action 16:04:26: FileCost. Computing space requirements
Action start 16:04:26: FileCost.
MSI (s) (54:B4) [16:04:26:043]: Note: 1: 2205 2: 3: MsiAssembly
MSI (s) (54:B4) [16:04:26:043]: Note: 1: 2205 2: 3: Registry
MSI (s) (54:B4) [16:04:26:043]: Note: 1: 2205 2: 3: Registry
MSI (s) (54:B4) [16:04:26:043]: Note: 1: 2205 2: 3: Class
MSI (s) (54:B4) [16:04:26:043]: Note: 1: 2205 2: 3: Extension
MSI (s) (54:B4) [16:04:26:043]: Note: 1: 2205 2: 3: TypeLib
Action ended 16:04:26: FileCost. Return value 1.
MSI (s) (54:B4) [16:04:26:043]: Doing action: CostFinalize
MSI (s) (54:B4) [16:04:26:043]: Note: 1: 2205 2: 3: ActionText
Action 16:04:26: CostFinalize. Computing space requirements
Action start 16:04:26: CostFinalize.
MSI (s) (54:B4) [16:04:26:043]: PROPERTY CHANGE: Adding OutOfDiskSpace property. Its value is '0'.
MSI (s) (54:B4) [16:04:26:043]: PROPERTY CHANGE: Adding OutOfNoRbDiskSpace property. Its value is '0'.
MSI (s) (54:B4) [16:04:26:043]: PROPERTY CHANGE: Adding PrimaryVolumeSpaceAvailable property. Its value is '0'.
MSI (s) (54:B4) [16:04:26:043]: PROPERTY CHANGE: Adding PrimaryVolumeSpaceRequired property. Its value is '0'.
MSI (s) (54:B4) [16:04:26:043]: PROPERTY CHANGE: Adding PrimaryVolumeSpaceRemaining property. Its value is '0'.
MSI (s) (54:B4) [16:04:26:043]: Note: 1: 2205 2: 3: Patch
MSI (s) (54:B4) [16:04:26:043]: Note: 1: 2205 2: 3: Condition
MSI (s) (54:B4) [16:04:26:043]: PROPERTY CHANGE: Adding dir9777D8246D1EFF4BCE1BBB3725F54761 property. Its value is 'C:\Program Files\SplunkUniversalForwarder\share\'.
MSI (s) (54:B4) [16:04:26:043]: PROPERTY CHANGE: Adding dirD3369B4CFA7BF6DCB57584A7F452CA0A property. Its value is 'C:\Program Files\SplunkUniversalForwarder\share\splunk\'.
MSI (s) (54:B4) [16:04:26:043]: PROPERTY CHANGE: Adding dir9DF6D6597089BA01028EE58CBBF75736 property. Its value is 'C:\Program Files\SplunkUniversalForwarder\share\splunk\3rdparty\'.
MSI (s) (54:B4) [16:04:26:043]: PROPERTY CHANGE: Adding dirCC4BF51C3FB0120CE9B785729700549B property. Its value is 'C:\Program Files\SplunkUniversalForwarder\lib\'.
MSI (s) (54:B4) [16:04:26:043]: PROPERTY CHANGE: Adding dir3E02976F57563947ADB6A8038DF4FCEF property. Its value is 'C:\Program Files\SplunkUniversalForwarder\etc\'.
MSI (s) (54:B4) [16:04:26:043]: PROPERTY CHANGE: Adding dirCFB1DCA36329665F066AABF5013AECA9 property. Its value is 'C:\Program Files\SplunkUniversalForwarder\etc\system\'.
MSI (s) (54:B4) [16:04:26:043]: PROPERTY CHANGE: Adding dir087F918F10A120B6907E2460F0868A49 property. Its value is 'C:\Program Files\SplunkUniversalForwarder\etc\system\static\'.
MSI (s) (54:B4) [16:04:26:043]: PROPERTY CHANGE: Adding dir5083584ADFC4261D3780F7B66CB3B7B3 property. Its value is 'C:\Program Files\SplunkUniversalForwarder\etc\system\README\'.
MSI (s) (54:B4) [16:04:26:043]: PROPERTY CHANGE: Adding dir858D19BEE324185B277CA79FFC48EDEE property. Its value is 'C:\Program Files\SplunkUniversalForwarder\etc\system\metadata\'.
MSI (s) (54:B4) [16:04:26:043]: PROPERTY CHANGE: Adding dirD3351CCE95594E87E2CC36C1024B5B4C property. Its value is 'C:\Program Files\SplunkUniversalForwarder\etc\system\local\'.
MSI (s) (54:B4) [16:04:26:043]: PROPERTY CHANGE: Adding dirBAC85229BB4A3494F5ECCB42AA1B824B property. Its value is 'C:\Program Files\SplunkUniversalForwarder\etc\system\default\'.
MSI (s) (54:B4) [16:04:26:043]: PROPERTY CHANGE: Adding dir5320F257A67DB36A4CED85E00FC63DD0 property. Its value is 'C:\Program Files\SplunkUniversalForwarder\etc\system\bin\'.
MSI (s) (54:B4) [16:04:26:043]: PROPERTY CHANGE: Adding dir6EEC3061DFBF56B9D6D2F8CBEC90FE26 property. Its value is 'C:\Program Files\SplunkUniversalForwarder\etc\shcluster\'.
MSI (s) (54:B4) [16:04:26:043]: PROPERTY CHANGE: Adding dir7A9E1C63375946BEF53B8BCD2F9EB32B property. Its value is 'C:\Program Files\SplunkUniversalForwarder\etc\shcluster\users\'.
MSI (s) (54:B4) [16:04:26:043]: PROPERTY CHANGE: Adding dir62FE35BBE7BD45CAEAB9D4261B2C1DA9 property. Its value is 'C:\Program Files\SplunkUniversalForwarder\etc\shcluster\apps\'.
MSI (s) (54:B4) [16:04:26:043]: PROPERTY CHANGE: Adding dirEA4E77DDDE1ED87692CD92A2F7477FDA property. Its value is 'C:\Program Files\SplunkUniversalForwarder\etc\myinstall\'.
MSI (s) (54:B4) [16:04:26:043]: PROPERTY CHANGE: Adding dir613AD2632481811E0F84C80F31F4CD56 property. Its value is 'C:\Program Files\SplunkUniversalForwarder\etc\modules\'.
MSI (s) (54:B4) [16:04:26:043]: PROPERTY CHANGE: Adding dir36980B38D75840D0DF3C22965AFE352F property. Its value is 'C:\Program Files\SplunkUniversalForwarder\etc\modules\parsing\'.
MSI (s) (54:B4) [16:04:26:043]: PROPERTY CHANGE: Adding dir4B3ADB252806E43AB420F8399AC61D45 property. Its value is 'C:\Program Files\SplunkUniversalForwarder\etc\modules\input\'.
MSI (s) (54:B4) [16:04:26:043]: PROPERTY CHANGE: Adding dir08A71AA8240CE634F2916BD8FD86AE9D property. Its value is 'C:\Program Files\SplunkUniversalForwarder\etc\modules\input\winparsing\'.
MSI (s) (54:B4) [16:04:26:043]: PROPERTY CHANGE: Adding dir350E86D3D8394619D5C56BE268AB8C03 property. Its value is 'C:\Program Files\SplunkUniversalForwarder\etc\modules\input\wineventlog\'.
MSI (s) (54:B4) [16:04:26:043]: PROPERTY CHANGE: Adding dir500C5AB468B41B12914CAFC92914BB04 property. Its value is 'C:\Program Files\SplunkUniversalForwarder\etc\modules\input\UDP\'.
MSI (s) (54:B4) [16:04:26:043]: PROPERTY CHANGE: Adding dir40C5047ABE9F85BC416CF37384338C22 property. Its value is 'C:\Program Files\SplunkUniversalForwarder\etc\modules\input\TCP\'.
MSI (s) (54:B4) [16:04:26:043]: PROPERTY CHANGE: Adding dirAAE2EA6FF6BFF3615E0F6ECB4F8B8317 property. Its value is 'C:\Program Files\SplunkUniversalForwarder\etc\modules\input\tailfile\'.
MSI (s) (54:B4) [16:04:26:043]: PROPERTY CHANGE: Adding dir623F2857FD6CE56C0C7472F3CF4B157E property. Its value is 'C:\Program Files\SplunkUniversalForwarder\etc\modules\input\structuredparsing\'.
MSI (s) (54:B4) [16:04:26:043]: PROPERTY CHANGE: Adding dir3C58D8B9DB7081CC9C009A2FA233FFFD property. Its value is 'C:\Program Files\SplunkUniversalForwarder\etc\modules\input\fschangemanager\'.
MSI (s) (54:B4) [16:04:26:043]: PROPERTY CHANGE: Adding dir3F2ED1881D5C561B698B737D96419537 property. Its value is 'C:\Program Files\SplunkUniversalForwarder\etc\modules\input\exec\'.
MSI (s) (54:B4) [16:04:26:043]: PROPERTY CHANGE: Adding dirA6241AC9F2CFDD1D7D4327FB5A124C92 property. Its value is 'C:\Program Files\SplunkUniversalForwarder\etc\disabled-apps\'.
MSI (s) (54:B4) [16:04:26:043]: PROPERTY CHANGE: Adding dir67189055EBCF5D1437F0A9D30368ED9C property. Its value is 'C:\Program Files\SplunkUniversalForwarder\etc\deployment-apps\'.
MSI (s) (54:B4) [16:04:26:043]: PROPERTY CHANGE: Adding dir2A81299A0652E91159BE1994DD92316A property. Its value is 'C:\Program Files\SplunkUniversalForwarder\etc\auth\'.
MSI (s) (54:B4) [16:04:26:043]: PROPERTY CHANGE: Adding dirB06939592AE1B7F84A5F1802888016F6 property. Its value is 'C:\Program Files\SplunkUniversalForwarder\etc\apps\'.
MSI (s) (54:B4) [16:04:26:043]: PROPERTY CHANGE: Adding dir060491FD1B1F02D6FE725F0B7611F71E property. Its value is 'C:\Program Files\SplunkUniversalForwarder\etc\apps\SplunkUniversalForwarder\'.
MSI (s) (54:B4) [16:04:26:043]: PROPERTY CHANGE: Adding dirF389DCA026B8D0A2E829970DE12F66F0 property. Its value is 'C:\Program Files\SplunkUniversalForwarder\etc\apps\SplunkUniversalForwarder\metadata\'.
MSI (s) (54:B4) [16:04:26:043]: PROPERTY CHANGE: Adding dir2D2122E4CFDE8C263EEE7452554D6DA2 property. Its value is 'C:\Program Files\SplunkUniversalForwarder\etc\apps\SplunkUniversalForwarder\default\'.
MSI (s) (54:B4) [16:04:26:043]: PROPERTY CHANGE: Adding dir302A0E4D0E8A28D4161D5640B55896DC property. Its value is 'C:\Program Files\SplunkUniversalForwarder\etc\apps\search\'.
MSI (s) (54:B4) [16:04:26:043]: PROPERTY CHANGE: Adding dir66FC566CEF189328CCCC8589311D2503 property. Its value is 'C:\Program Files\SplunkUniversalForwarder\etc\apps\search\metadata\'.
MSI (s) (54:B4) [16:04:26:043]: PROPERTY CHANGE: Adding dir05B2167CF0ED7EFD2AD93158875F568C property. Its value is 'C:\Program Files\SplunkUniversalForwarder\etc\apps\search\lookups\'.
MSI (s) (54:B4) [16:04:26:043]: PROPERTY CHANGE: Adding dir0ABBB45398994B5C89841ED05851776C property. Its value is 'C:\Program Files\SplunkUniversalForwarder\etc\apps\search\default\'.
MSI (s) (54:B4) [16:04:26:043]: PROPERTY CHANGE: Adding dir1ACCD951EA5C77FB92B36E8AB9382509 property. Its value is 'C:\Program Files\SplunkUniversalForwarder\etc\apps\learned\'.
MSI (s) (54:B4) [16:04:26:043]: PROPERTY CHANGE: Adding dir28F70AA0D15CA730061DB84FFE88D805 property. Its value is 'C:\Program Files\SplunkUniversalForwarder\etc\apps\learned\metadata\'.
MSI (s) (54:B4) [16:04:26:043]: PROPERTY CHANGE: Adding dir7C2F815EE2C9E7DBE85066CF5B056987 property. Its value is 'C:\Program Files\SplunkUniversalForwarder\etc\apps\learned\default\'.
MSI (s) (54:B4) [16:04:26:043]: PROPERTY CHANGE: Adding dirFB744D04EDFDCD8AF58A1449ABBAD45F property. Its value is 'C:\Program Files\SplunkUniversalForwarder\etc\apps\introspection_generator_addon\'.
MSI (s) (54:B4) [16:04:26:043]: PROPERTY CHANGE: Adding dirA4925C017BDFD103F37D0BDE702E9C43 property. Its value is 'C:\Program Files\SplunkUniversalForwarder\etc\apps\introspection_generator_addon\default\'.
MSI (s) (54:B4) [16:04:26:043]: PROPERTY CHANGE: Adding dirFB7FAFCA28F7419DE35973B35C5D283E property. Its value is 'C:\Program Files\SplunkUniversalForwarder\etc\apps\introspection_generator_addon\bin\'.
MSI (s) (54:B4) [16:04:26:043]: PROPERTY CHANGE: Adding dirA5528701EE26FFBF346CCE20EE8ACE99 property. Its value is 'C:\Program Files\SplunkUniversalForwarder\bin\'.
MSI (s) (54:B4) [16:04:26:043]: PROPERTY CHANGE: Adding dirE99B67BA83CA9B283DA87308D2AB32C0 property. Its value is 'C:\Program Files\SplunkUniversalForwarder\bin\scripts\'.
MSI (s) (54:B4) [16:04:26:043]: Target path resolution complete. Dumping Directory table...
MSI (s) (54:B4) [16:04:26:043]: Note: target paths subject to change (via custom actions or browsing)
MSI (s) (54:B4) [16:04:26:043]: Dir (target): Key: TARGETDIR , Object: D:\
MSI (s) (54:B4) [16:04:26:043]: Dir (target): Key: ProgramFiles64Folder , Object: C:\Program Files\
MSI (s) (54:B4) [16:04:26:043]: Dir (target): Key: INSTALLDIR , Object: C:\Program Files\SplunkUniversalForwarder\
MSI (s) (54:B4) [16:04:26:043]: Dir (target): Key: dir9777D8246D1EFF4BCE1BBB3725F54761 , Object: C:\Program Files\SplunkUniversalForwarder\share\
MSI (s) (54:B4) [16:04:26:043]: Dir (target): Key: dirD3369B4CFA7BF6DCB57584A7F452CA0A , Object: C:\Program Files\SplunkUniversalForwarder\share\splunk\
MSI (s) (54:B4) [16:04:26:043]: Dir (target): Key: dir9DF6D6597089BA01028EE58CBBF75736 , Object: C:\Program Files\SplunkUniversalForwarder\share\splunk\3rdparty\
MSI (s) (54:B4) [16:04:26:043]: Dir (target): Key: dirCC4BF51C3FB0120CE9B785729700549B , Object: C:\Program Files\SplunkUniversalForwarder\lib\
MSI (s) (54:B4) [16:04:26:043]: Dir (target): Key: dir3E02976F57563947ADB6A8038DF4FCEF , Object: C:\Program Files\SplunkUniversalForwarder\etc\
MSI (s) (54:B4) [16:04:26:043]: Dir (target): Key: dirCFB1DCA36329665F066AABF5013AECA9 , Object: C:\Program Files\SplunkUniversalForwarder\etc\system\
MSI (s) (54:B4) [16:04:26:043]: Dir (target): Key: dir087F918F10A120B6907E2460F0868A49 , Object: C:\Program Files\SplunkUniversalForwarder\etc\system\static\
MSI (s) (54:B4) [16:04:26:043]: Dir (target): Key: dir5083584ADFC4261D3780F7B66CB3B7B3 , Object: C:\Program Files\SplunkUniversalForwarder\etc\system\README\
MSI (s) (54:B4) [16:04:26:043]: Dir (target): Key: dir858D19BEE324185B277CA79FFC48EDEE , Object: C:\Program Files\SplunkUniversalForwarder\etc\system\metadata\
MSI (s) (54:B4) [16:04:26:043]: Dir (target): Key: dirD3351CCE95594E87E2CC36C1024B5B4C , Object: C:\Program Files\SplunkUniversalForwarder\etc\system\local\
MSI (s) (54:B4) [16:04:26:043]: Dir (target): Key: dirBAC85229BB4A3494F5ECCB42AA1B824B , Object: C:\Program Files\SplunkUniversalForwarder\etc\system\default\
MSI (s) (54:B4) [16:04:26:043]: Dir (target): Key: dir5320F257A67DB36A4CED85E00FC63DD0 , Object: C:\Program Files\SplunkUniversalForwarder\etc\system\bin\
MSI (s) (54:B4) [16:04:26:043]: Dir (target): Key: dir6EEC3061DFBF56B9D6D2F8CBEC90FE26 , Object: C:\Program Files\SplunkUniversalForwarder\etc\shcluster\
MSI (s) (54:B4) [16:04:26:043]: Dir (target): Key: dir7A9E1C63375946BEF53B8BCD2F9EB32B , Object: C:\Program Files\SplunkUniversalForwarder\etc\shcluster\users\
MSI (s) (54:B4) [16:04:26:043]: Dir (target): Key: dir62FE35BBE7BD45CAEAB9D4261B2C1DA9 , Object: C:\Program Files\SplunkUniversalForwarder\etc\shcluster\apps\
MSI (s) (54:B4) [16:04:26:043]: Dir (target): Key: dirEA4E77DDDE1ED87692CD92A2F7477FDA , Object: C:\Program Files\SplunkUniversalForwarder\etc\myinstall\
MSI (s) (54:B4) [16:04:26:043]: Dir (target): Key: dir613AD2632481811E0F84C80F31F4CD56 , Object: C:\Program Files\SplunkUniversalForwarder\etc\modules\
MSI (s) (54:B4) [16:04:26:043]: Dir (target): Key: dir36980B38D75840D0DF3C22965AFE352F , Object: C:\Program Files\SplunkUniversalForwarder\etc\modules\parsing\
MSI (s) (54:B4) [16:04:26:043]: Dir (target): Key: dir4B3ADB252806E43AB420F8399AC61D45 , Object: C:\Program Files\SplunkUniversalForwarder\etc\modules\input\
MSI (s) (54:B4) [16:04:26:043]: Dir (target): Key: dir08A71AA8240CE634F2916BD8FD86AE9D , Object: C:\Program Files\SplunkUniversalForwarder\etc\modules\input\winparsing\
MSI (s) (54:B4) [16:04:26:043]: Dir (target): Key: dir350E86D3D8394619D5C56BE268AB8C03 , Object: C:\Program Files\SplunkUniversalForwarder\etc\modules\input\wineventlog\
MSI (s) (54:B4) [16:04:26:043]: Dir (target): Key: dir500C5AB468B41B12914CAFC92914BB04 , Object: C:\Program Files\SplunkUniversalForwarder\etc\modules\input\UDP\
MSI (s) (54:B4) [16:04:26:043]: Dir (target): Key: dir40C5047ABE9F85BC416CF37384338C22 , Object: C:\Program Files\SplunkUniversalForwarder\etc\modules\input\TCP\
MSI (s) (54:B4) [16:04:26:043]: Dir (target): Key: dirAAE2EA6FF6BFF3615E0F6ECB4F8B8317 , Object: C:\Program Files\SplunkUniversalForwarder\etc\modules\input\tailfile\
MSI (s) (54:B4) [16:04:26:043]: Dir (target): Key: dir623F2857FD6CE56C0C7472F3CF4B157E , Object: C:\Program Files\SplunkUniversalForwarder\etc\modules\input\structuredparsing\
MSI (s) (54:B4) [16:04:26:043]: Dir (target): Key: dir3C58D8B9DB7081CC9C009A2FA233FFFD , Object: C:\Program Files\SplunkUniversalForwarder\etc\modules\input\fschangemanager\
MSI (s) (54:B4) [16:04:26:043]: Dir (target): Key: dir3F2ED1881D5C561B698B737D96419537 , Object: C:\Program Files\SplunkUniversalForwarder\etc\modules\input\exec\
MSI (s) (54:B4) [16:04:26:043]: Dir (target): Key: dirA6241AC9F2CFDD1D7D4327FB5A124C92 , Object: C:\Program Files\SplunkUniversalForwarder\etc\disabled-apps\
MSI (s) (54:B4) [16:04:26:043]: Dir (target): Key: dir67189055EBCF5D1437F0A9D30368ED9C , Object: C:\Program Files\SplunkUniversalForwarder\etc\deployment-apps\
MSI (s) (54:B4) [16:04:26:043]: Dir (target): Key: dir2A81299A0652E91159BE1994DD92316A , Object: C:\Program Files\SplunkUniversalForwarder\etc\auth\
MSI (s) (54:B4) [16:04:26:043]: Dir (target): Key: dirB06939592AE1B7F84A5F1802888016F6 , Object: C:\Program Files\SplunkUniversalForwarder\etc\apps\
MSI (s) (54:B4) [16:04:26:043]: Dir (target): Key: dir060491FD1B1F02D6FE725F0B7611F71E , Object: C:\Program Files\SplunkUniversalForwarder\etc\apps\SplunkUniversalForwarder\
MSI (s) (54:B4) [16:04:26:043]: Dir (target): Key: dirF389DCA026B8D0A2E829970DE12F66F0 , Object: C:\Program Files\SplunkUniversalForwarder\etc\apps\SplunkUniversalForwarder\metadata\
MSI (s) (54:B4) [16:04:26:043]: Dir (target): Key: dir2D2122E4CFDE8C263EEE7452554D6DA2 , Object: C:\Program Files\SplunkUniversalForwarder\etc\apps\SplunkUniversalForwarder\default\
MSI (s) (54:B4) [16:04:26:043]: Dir (target): Key: dir302A0E4D0E8A28D4161D5640B55896DC , Object: C:\Program Files\SplunkUniversalForwarder\etc\apps\search\
MSI (s) (54:B4) [16:04:26:043]: Dir (target): Key: dir66FC566CEF189328CCCC8589311D2503 , Object: C:\Program Files\SplunkUniversalForwarder\etc\apps\search\metadata\
MSI (s) (54:B4) [16:04:26:043]: Dir (target): Key: dir05B2167CF0ED7EFD2AD93158875F568C , Object: C:\Program Files\SplunkUniversalForwarder\etc\apps\search\lookups\
MSI (s) (54:B4) [16:04:26:043]: Dir (target): Key: dir0ABBB45398994B5C89841ED05851776C , Object: C:\Program Files\SplunkUniversalForwarder\etc\apps\search\default\
MSI (s) (54:B4) [16:04:26:043]: Dir (target): Key: dir1ACCD951EA5C77FB92B36E8AB9382509 , Object: C:\Program Files\SplunkUniversalForwarder\etc\apps\learned\
MSI (s) (54:B4) [16:04:26:043]: Dir (target): Key: dir28F70AA0D15CA730061DB84FFE88D805 , Object: C:\Program Files\SplunkUniversalForwarder\etc\apps\learned\metadata\
MSI (s) (54:B4) [16:04:26:043]: Dir (target): Key: dir7C2F815EE2C9E7DBE85066CF5B056987 , Object: C:\Program Files\SplunkUniversalForwarder\etc\apps\learned\default\
MSI (s) (54:B4) [16:04:26:043]: Dir (target): Key: dirFB744D04EDFDCD8AF58A1449ABBAD45F , Object: C:\Program Files\SplunkUniversalForwarder\etc\apps\introspection_generator_addon\
MSI (s) (54:B4) [16:04:26:043]: Dir (target): Key: dirA4925C017BDFD103F37D0BDE702E9C43 , Object: C:\Program Files\SplunkUniversalForwarder\etc\apps\introspection_generator_addon\default\
MSI (s) (54:B4) [16:04:26:043]: Dir (target): Key: dirFB7FAFCA28F7419DE35973B35C5D283E , Object: C:\Program Files\SplunkUniversalForwarder\etc\apps\introspection_generator_addon\bin\
MSI (s) (54:B4) [16:04:26:043]: Dir (target): Key: dirA5528701EE26FFBF346CCE20EE8ACE99 , Object: C:\Program Files\SplunkUniversalForwarder\bin\
MSI (s) (54:B4) [16:04:26:043]: Dir (target): Key: dirE99B67BA83CA9B283DA87308D2AB32C0 , Object: C:\Program Files\SplunkUniversalForwarder\bin\scripts\
MSI (s) (54:B4) [16:04:26:043]: Note: 1: 2205 2: 3: MsiAssembly
MSI (s) (54:B4) [16:04:26:043]: Note: 1: 2228 2: 3: MsiAssembly 4: SELECT `MsiAssembly`.`Attributes`, `MsiAssembly`.`File_Application`, `MsiAssembly`.`File_Manifest`, `Component`.`KeyPath` FROM `MsiAssembly`, `Component` WHERE `MsiAssembly`.`Component_` = `Component`.`Component` AND `MsiAssembly`.`Component_` = ?
Action ended 16:04:26: CostFinalize. Return value 1.
MSI (s) (54:B4) [16:04:26:059]: Skipping action: StopSplunkService (condition is false)
MSI (s) (54:B4) [16:04:26:059]: Doing action: InstallValidate
MSI (s) (54:B4) [16:04:26:059]: Note: 1: 2205 2: 3: ActionText
Action 16:04:26: InstallValidate. Validating install
Action start 16:04:26: InstallValidate.
MSI (s) (54:B4) [16:04:26:059]: Feature: Complete; Installed: Absent; Request: Local; Action: Local
MSI (s) (54:B4) [16:04:26:059]: Component: cmpE0C1D9827F895B235C8EDF4E62BA29AA; Installed: Absent; Request: Local; Action: Local; Client State: Unknown
MSI (s) (54:B4) [16:04:26:059]: Component: cmp3BA9BC5FE043B248FB9B10FD71CF3CE0; Installed: Absent; Request: Local; Action: Local; Client State: Unknown
MSI (s) (54:B4) [16:04:26:059]: Component: cmpD8027B6CA6CFD05127B04E70663EF8F7; Installed: Absent; Request: Local; Action: Local; Client State: Unknown
MSI (s) (54:B4) [16:04:26:059]: Component: cmpCFAE632A3F5DA473FFF71EC19A724447; Installed: Absent; Request: Local; Action: Local; Client State: Unknown
MSI (s) (54:B4) [16:04:26:059]: Component: cmp0AAF57B7225F5604899AD294B97CF060; Installed: Absent; Request: Local; Action: Local; Client State: Unknown
MSI (s) (54:B4) [16:04:26:059]: Component: cmpE0F5A29F462624A88A1A93C4CD4D1C83; Installed: Absent; Request: Local; Action: Local; Client State: Unknown
MSI (s) (54:B4) [16:04:26:059]: Component: cmp5C2E502B14F5438449BE6E33EC42C732; Installed: Absent; Request: Local; Action: Local; Client State: Unknown
MSI (s) (54:B4) [16:04:26:059]: Component: cmpCED0A605F08E58ADC3E10CEE0773F9AA; Installed: Absent; Request: Local; Action: Local; Client State: Unknown
MSI (s) (54:B4) [16:04:26:059]: Component: cmp1E191738E7623AF9E4847CFCDD7EF12B; Installed: Absent; Request: Local; Action: Local; Client State: Unknown
MSI (s) (54:B4) [16:04:26:059]: Component: cmpD391F72226355E89A5862C9990FA149C; Installed: Absent; Request: Local; Action: Local; Client State: Unknown
MSI (s) (54:B4) [16:04:26:059]: Component: cmpF1AA29CC3A8E657A63B7D040BACAFD8C; Installed: Absent; Request: Local; Action: Local; Client State: Unknown
MSI (s) (54:B4) [16:04:26:059]: Component: cmp44112E563E8FE36890060348CA8B590D; Installed: Absent; Request: Local; Action: Local; Client State: Unknown
MSI (s) (54:B4) [16:04:26:059]: Component: cmp6575CEE0E269D4F975E5F7761C03425D; Installed: Absent; Request: Local; Action: Local; Client State: Unknown
MSI (s) (54:B4) [16:04:26:059]: Component: cmpBC9629812F31E9974B16822D808448B1; Installed: Absent; Request: Local; Action: Local; Client State: Unknown
MSI (s) (54:B4) [16:04:26:059]: Component: cmp0BD4D2B627D65E46E657F3E03D50DE18; Installed: Absent; Request: Local; Action: Local; Client State: Unknown
MSI (s) (54:B4) [16:04:26:059]: Component: cmpE2AD68EED6FBEC50DE9B1A930A3ACED5; Installed: Absent; Request: Local; Action: Local; Client State: Unknown
MSI (s) (54:B4) [16:04:26:059]: Component: cmpE3E34A5A80BCC59D9062D1598741EDC6; Installed: Absent; Request: Local; Action: Local; Client State: Unknown
MSI (s) (54:B4) [16:04:26:059]: Component: cmpD06796CE19E8E320858208E48E1AE82C; Installed: Absent; Request: Local; Action: Local; Client State: Unknown
MSI (s) (54:B4) [16:04:26:059]: Component: cmp62207F7C7754C2CF25C9EA24AE5D3359; Installed: Absent; Request: Local; Action: Local; Client State: Unknown
MSI (s) (54:B4) [16:04:26:059]: Component: cmp397285D016843DCFC973659D4496644B; Installed: Absent; Request: Local; Action: Local; Client State: Unknown
MSI (s) (54:B4) [16:04:26:059]: Component: cmp90A5C513B7B824B451385F7A67384ED0; Installed: Absent; Request: Local; Action: Local; Client State: Unknown
MSI (s) (54:B4) [16:04:26:059]: Component: cmp8177C67066A9A4812336FD4D4B4B9D76; Installed: Absent; Request: Local; Action: Local; Client State: Unknown
MSI (s) (54:B4) [16:04:26:059]: Component: cmp46AF35CB9C5DD0A31245B34E20E2AD8E; Installed: Absent; Request: Local; Action: Local; Client State: Unknown
MSI (s) (54:B4) [16:04:26:059]: Component: cmp8BE7D2DC3BA62B3A265CBB889EDA519D; Installed: Absent; Request: Local; Action: Local; Client State: Unknown
MSI (s) (54:B4) [16:04:26:059]: Component: cmp6D71C99EC904F188CE4FB420FACC7A51; Installed: Absent; Request: Local; Action: Local; Client State: Unknown
MSI (s) (54:B4) [16:04:26:059]: Component: cmpE3EAD1C47DF1C9FD5FE4A87AB6ADD36A; Installed: Absent; Request: Local; Action: Local; Client State: Unknown
MSI (s) (54:B4) [16:04:26:059]: Component: cmp51D252983DB81229BB5C6266921CA9F5; Installed: Absent; Request: Local; Action: Local; Client State: Unknown
MSI (s) (54:B4) [16:04:26:059]: Component: cmp4F73C34C0682FA55A52045BE8EE32B79; Installed: Absent; Request: Local; Action: Local; Client State: Unknown
MSI (s) (54:B4) [16:04:26:059]: Component: cmpA90F4CB59CAD4AA1FAA88755BFC344A5; Installed: Absent; Request: Local; Action: Local; Client State: Unknown
MSI (s) (54:B4) [16:04:26:059]: Component: cmpC431B4DF07D0B0DB8FCC8E539DF0AF88; Installed: Absent; Request: Local; Action: Local; Client State: Unknown
MSI (s) (54:B4) [16:04:26:059]: Component: cmp79925E96273DF3C419CB37154B921E33; Installed: Absent; Request: Local; Action: Local; Client State: Unknown
MSI (s) (54:B4) [16:04:26:059]: Component: cmp9F75E4DBC0804DD0C7082709DF81895F; Installed: Absent; Request: Local; Action: Local; Client State: Unknown
MSI (s) (54:B4) [16:04:26:059]: Component: cmp2984294CE8638FA98BAC072051C7422B; Installed: Absent; Request: Local; Action: Local; Client State: Unknown
MSI (s) (54:B4) [16:04:26:059]: Component: cmp4245E78AB5D7178646A79B3CB59ACF5D; Installed: Absent; Request: Local; Action: Local; Client State: Unknown
MSI (s) (54:B4) [16:04:26:059]: Component: cmp8D7757E7114BE29F112062B115406B13; Installed: Absent; Request: Local; Action: Local; Client State: Unknown
MSI (s) (54:B4) [16:04:26:059]: Component: cmpCD0E5BA647C2FEFECA0D6FE03FEF7BE8; Installed: Absent; Request: Local; Action: Local; Client State: Unknown
MSI (s) (54:B4) [16:04:26:059]: Component: cmp81D6BAD92B3D64D99F38A9A930D11B6A; Installed: Absent; Request: Local; Action: Local; Client State: Unknown
MSI (s) (54:B4) [16:04:26:059]: Component: cmp5CDF9927169D2ED6EE69AAFAFF57301D; Installed: Absent; Request: Local; Action: Local; Client State: Unknown
MSI (s) (54:B4) [16:04:26:059]: Component: cmp8A4F3F2730AE508D6CB7ED7F0C64F3C7; Installed: Absent; Request: Local; Action: Local; Client State: Unknown
MSI (s) (54:B4) [16:04:26:059]: Component: cmpFECB333BB7BC72DA8E4F1A0C753224B9; Installed: Absent; Request: Local; Action: Local; Client State: Unknown
MSI (s) (54:B4) [16:04:26:059]: Component: cmp452A3810CA0F46BFDF0AC9E374499937; Installed: Absent; Request: Local; Action: Local; Client State: Unknown
MSI (s) (54:B4) [16:04:26:059]: Component: cmp1CCE5E735049A2BD1994B75EEB26341F; Installed: Absent; Request: Local; Action: Local; Client State: Unknown
MSI (s) (54:B4) [16:04:26:059]: Component: cmp5B475704A2F088F65DD8EDAFAE545FEF; Installed: Absent; Request: Local; Action: Local; Client State: Unknown
MSI (s) (54:B4) [16:04:26:059]: Component: cmp337CB9E928ED61ED635F8120137D3D37; Installed: Absent; Request: Local; Action: Local; Client State: Unknown
MSI (s) (54:B4) [16:04:26:059]: Component: cmp1E628124CA1DFD36D08DEFB9D2BBBCEE; Installed: Absent; Request: Local; Action: Local; Client State: Unknown
MSI (s) (54:B4) [16:04:26:059]: Component: cmp516C124E01231E50B8304A832373938A; Installed: Absent; Request: Local; Action: Local; Client State: Unknown
MSI (s) (54:B4) [16:04:26:059]: Component: cmpBE111C27BF10050F12AA686041295CDA; Installed: Absent; Request: Local; Action: Local; Client State: Unknown
MSI (s) (54:B4) [16:04:26:059]: Component: cmp057D6E4259A50DA7BB2F75AE6B9DFE9D; Installed: Absent; Request: Local; Action: Local; Client State: Unknown
MSI (s) (54:B4) [16:04:26:059]: Component: cmpBFC31B8E83767EE72DDEC68F328CDA67; Installed: Absent; Request: Local; Action: Local; Client State: Unknown
MSI (s) (54:B4) [16:04:26:059]: Component: cmp89244592A8BB0B1518A2A982D9DDB949; Installed: Absent; Request: Local; Action: Local; Client State: Unknown
MSI (s) (54:B4) [16:04:26:059]: Component: cmp104BCDCF54C8648F03F9EE6CF61C4D13; Installed: Absent; Request: Local; Action: Local; Client State: Unknown
MSI (s) (54:B4) [16:04:26:059]: Component: cmp32B6925D13B14EFA4F693C0CF102071E; Installed: Absent; Request: Local; Action: Local; Client State: Unknown
MSI (s) (54:B4) [16:04:26:059]: Component: cmp19CE10020B2A50CDE1EFC07D16ABD66C; Installed: Absent; Request: Local; Action: Local; Client State: Unknown
MSI (s) (54:B4) [16:04:26:059]: Component: cmpD2A50DABD803759C1BDE0A916A3A30F9; Installed: Absent; Request: Local; Action: Local; Client State: Unknown
MSI (s) (54:B4) [16:04:26:059]: Component: cmpC906D691FA75CB86076D61208B5391AA; Installed: Absent; Request: Local; Action: Local; Client State: Unknown
MSI (s) (54:B4) [16:04:26:059]: Component: cmp7AD4EFA0782923B1514DFD5E23AA7119; Installed: Absent; Request: Local; Action: Local; Client State: Unknown
MSI (s) (54:B4) [16:04:26:059]: Component: cmpE73D255FD4EA9AB608C5D8151D006CCA; Installed: Absent; Request: Local; Action: Local; Client State: Unknown
MSI (s) (54:B4) [16:04:26:059]: Component: cmpC542CD575BA9F1779B0A72440F7E4D59; Installed: Absent; Request: Local; Action: Local; Client State: Unknown
MSI (s) (54:B4) [16:04:26:059]: Component: cmp072278604765176F36DAD58E24C6F046; Installed: Absent; Request: Local; Action: Local; Client State: Unknown
MSI (s) (54:B4) [16:04:26:059]: Component: cmp237DA7D16EAC0F3ADF6410571CAACA2E; Installed: Absent; Request: Local; Action: Local; Client State: Unknown
MSI (s) (54:B4) [16:04:26:059]: Component: cmp445CEF8FA45B906DFD5F41F128CE0A3B; Installed: Absent; Request: Local; Action: Local; Client State: Unknown
MSI (s) (54:B4) [16:04:26:059]: Component: cmp98C2898F545BE1FE514C9CCD69300CE4; Installed: Absent; Request: Local; Action: Local; Client State: Unknown
MSI (s) (54:B4) [16:04:26:059]: Component: cmp9E22A928E9BCB824B59ADFDA8C09C940; Installed: Absent; Request: Local; Action: Local; Client State: Unknown
MSI (s) (54:B4) [16:04:26:059]: Component: cmp9403F9B19E5CABC0194BC31E5E6E5C0B; Installed: Absent; Request: Local; Action: Local; Client State: Unknown
MSI (s) (54:B4) [16:04:26:059]: Component: cmp1C20FF01E5894BE373F5A49D56CAC055; Installed: Absent; Request: Local; Action: Local; Client State: Unknown
MSI (s) (54:B4) [16:04:26:059]: Component: cmp0EFB0C4EB52184AFA0923E6518E232C0; Installed: Absent; Request: Local; Action: Local; Client State: Unknown
MSI (s) (54:B4) [16:04:26:059]: Component: cmpA8578790A2B0FE351CFCFE9740995AEB; Installed: Absent; Request: Local; Action: Local; Client State: Unknown
MSI (s) (54:B4) [16:04:26:059]: Component: cmpBD8006852F39819E6EFFCA087CC76DC7; Installed: Absent; Request: Local; Action: Local; Client State: Unknown
MSI (s) (54:B4) [16:04:26:059]: Component: cmp13A6CAA549C95AC82B1CEABE13BE9FF5; Installed: Absent; Request: Local; Action: Local; Client State: Unknown
MSI (s) (54:B4) [16:04:26:059]: Component: cmp96EA2D0A6FD720B39F70B1F63EF62477; Installed: Absent; Request: Local; Action: Local; Client State: Unknown
MSI (s) (54:B4) [16:04:26:059]: Component: cmpD98DC2C92A47A0D638A43256CBE8B9E9; Installed: Absent; Request: Local; Action: Local; Client State: Unknown
MSI (s) (54:B4) [16:04:26:059]: Component: cmp4DF8BAC097259D44BC7BAAED1B0D8DE0; Installed: Absent; Request: Local; Action: Local; Client State: Unknown
MSI (s) (54:B4) [16:04:26:059]: Component: cmpC9A87658C2152296EA204DD3556DB455; Installed: Absent; Request: Local; Action: Local; Client State: Unknown
MSI (s) (54:B4) [16:04:26:059]: Component: cmp826DFA491208AC471FA3FC0A65560CBC; Installed: Absent; Request: Local; Action: Local; Client State: Unknown
MSI (s) (54:B4) [16:04:26:059]: Component: cmp497D2CF47BFEA97C1DC0A83676B64ECE; Installed: Absent; Request: Local; Action: Local; Client State: Unknown
MSI (s) (54:B4) [16:04:26:059]: Component: cmp8C0A72303D0CEDE9E18D51CBF87B80D2; Installed: Absent; Request: Local; Action: Local; Client State: Unknown
MSI (s) (54:B4) [16:04:26:059]: Component: cmp73518EBCC8DB817485FC5FF4C9B6B431; Installed: Absent; Request: Local; Action: Local; Client State: Unknown
MSI (s) (54:B4) [16:04:26:059]: Component: cmp0884D6EE79B61425857D8E43B34FA83F; Installed: Absent; Request: Local; Action: Local; Client State: Unknown
MSI (s) (54:B4) [16:04:26:059]: Component: cmp6556CF9A53CAC6C1EB6A7784B7F5D542; Installed: Absent; Request: Local; Action: Local; Client State: Unknown
MSI (s) (54:B4) [16:04:26:059]: Component: cmp31643A04E4CC80365DC2D28B1A735ECA; Installed: Absent; Request: Local; Action: Local; Client State: Unknown
MSI (s) (54:B4) [16:04:26:059]: Component: cmp289C9638D2DCD1804A78A93EC0C759DB; Installed: Absent; Request: Local; Action: Local; Client State: Unknown
MSI (s) (54:B4) [16:04:26:059]: Component: cmp027C56A412BDFC4943261D3A6CF55F4C; Installed: Absent; Request: Local; Action: Local; Client State: Unknown
MSI (s) (54:B4) [16:04:26:059]: Component: cmp803ED6778571E1E8BC2A0DA6F599685B; Installed: Absent; Request: Local; Action: Local; Client State: Unknown
MSI (s) (54:B4) [16:04:26:059]: Component: cmp229F5547B7443EB65C9FCB3F7FE6A64F; Installed: Absent; Request: Local; Action: Local; Client State: Unknown
MSI (s) (54:B4) [16:04:26:059]: Component: cmpFB949582E2E1F3D88DA81D8FF6C4391E; Installed: Absent; Request: Local; Action: Local; Client State: Unknown
MSI (s) (54:B4) [16:04:26:059]: Component: cmp6BBB6917372B45DC530F6426C9708F67; Installed: Absent; Request: Local; Action: Local; Client State: Unknown
MSI (s) (54:B4) [16:04:26:059]: Component: cmp05B0173A7E5BB2ECAE3705DF3408673D; Installed: Absent; Request: Local; Action: Local; Client State: Unknown
MSI (s) (54:B4) [16:04:26:059]: Component: cmp6A964C8E7948FF0AFB3EB0A0556ACF11; Installed: Absent; Request: Local; Action: Local; Client State: Unknown
MSI (s) (54:B4) [16:04:26:059]: Component: cmp062CEC3642A7D37CEAF084EF18C81453; Installed: Absent; Request: Local; Action: Local; Client State: Unknown
MSI (s) (54:B4) [16:04:26:059]: Component: cmp54A52F19D32D17A0BA0E3F2B2873F910; Installed: Absent; Request: Local; Action: Local; Client State: Unknown
MSI (s) (54:B4) [16:04:26:059]: Component: cmp75AA022280F8E439723763D5EF0353E7; Installed: Absent; Request: Local; Action: Local; Client State: Unknown
MSI (s) (54:B4) [16:04:26:059]: Component: cmp46FF89CFD6C95A66D1EFAAE4F3FFFB10; Installed: Absent; Request: Local; Action: Local; Client State: Unknown
MSI (s) (54:B4) [16:04:26:059]: Component: cmpBAB09F621520E3C072C640993366B92F; Installed: Absent; Request: Local; Action: Local; Client State: Unknown
MSI (s) (54:B4) [16:04:26:059]: Component: cmpD0644632852207E21BCAEE394E925ACE; Installed: Absent; Request: Local; Action: Local; Client State: Unknown
MSI (s) (54:B4) [16:04:26:059]: Component: cmpFC11AE8D4F6A3557CBCE6D595DB0832D; Installed: Absent; Request: Local; Action: Local; Client State: Unknown
MSI (s) (54:B4) [16:04:26:059]: Component: cmpB9DA1C6B104B9E8302D0A6D7C2F722A0; Installed: Absent; Request: Local; Action: Local; Client State: Unknown
MSI (s) (54:B4) [16:04:26:059]: Component: cmp94650DB2EAD0CE1265B21FE474291974; Installed: Absent; Request: Local; Action: Local; Client State: Unknown
MSI (s) (54:B4) [16:04:26:059]: Component: cmpF647D30996D8A5ED1591FA460C8DCBDB; Installed: Absent; Request: Local; Action: Local; Client State: Unknown
MSI (s) (54:B4) [16:04:26:059]: Component: cmp83B2CA5272E838C93646929B0245F9F0; Installed: Absent; Request: Local; Action: Local; Client State: Unknown
MSI (s) (54:B4) [16:04:26:059]: Component: cmpB183B6ABD17E0542D9F32E310F0E589A; Installed: Absent; Request: Local; Action: Local; Client State: Unknown
MSI (s) (54:B4) [16:04:26:059]: Component: cmpCAEBB5DFB5D944F1E23A0B0EDEABE583; Installed: Absent; Request: Local; Action: Local; Client State: Unknown
MSI (s) (54:B4) [16:04:26:059]: Component: cmp3EDF49FFA367D795A9E603CF6BAF8E56; Installed: Absent; Request: Local; Action: Local; Client State: Unknown
MSI (s) (54:B4) [16:04:26:059]: Component: cmpDB8BA501EB8C48C0DE33FF1A40E0EC63; Installed: Absent; Request: Local; Action: Local; Client State: Unknown
MSI (s) (54:B4) [16:04:26:059]: Component: cmpB966CCC737CADF427391831B9F2F01C9; Installed: Absent; Request: Local; Action: Local; Client State: Unknown
MSI (s) (54:B4) [16:04:26:059]: Component: cmp7ABB651F24A70F525B34E100CF9C0871; Installed: Absent; Request: Local; Action: Local; Client State: Unknown
MSI (s) (54:B4) [16:04:26:059]: Component: cmpDB7F2CC2526547E1B4F97AA35C74AD2C; Installed: Absent; Request: Local; Action: Local; Client State: Unknown
MSI (s) (54:B4) [16:04:26:059]: Component: cmp16FC9FD86FF16A321BC61DF0F587800F; Installed: Absent; Request: Local; Action: Local; Client State: Unknown
MSI (s) (54:B4) [16:04:26:059]: Component: cmp6DCEDD4511F3DD2FA2FA7E0584E9F957; Installed: Absent; Request: Local; Action: Local; Client State: Unknown
MSI (s) (54:B4) [16:04:26:059]: Component: cmp883B724576D344BE5CA42A3740626AB2; Installed: Absent; Request: Local; Action: Local; Client State: Unknown
MSI (s) (54:B4) [16:04:26:059]: Component: cmp24CC87F7E78B23AE9E8C7E0FF3190A3D; Installed: Absent; Request: Local; Action: Local; Client State: Unknown
MSI (s) (54:B4) [16:04:26:059]: Component: cmp07A0E9B8BE5C6BA6459855B6B2008BBE; Installed: Absent; Request: Local; Action: Local; Client State: Unknown
MSI (s) (54:B4) [16:04:26:059]: Component: cmp5626381BA3C678E532A39AF47B0A694E; Installed: Absent; Request: Local; Action: Local; Client State: Unknown
MSI (s) (54:B4) [16:04:26:059]: Component: cmpEFD0D55A4FD3E208DC8D020455964D73; Installed: Absent; Request: Local; Action: Local; Client State: Unknown
MSI (s) (54:B4) [16:04:26:059]: Component: cmpEFD444897DFD5E5A596664D38BDDAD53; Installed: Absent; Request: Local; Action: Local; Client State: Unknown
MSI (s) (54:B4) [16:04:26:059]: Component: cmp1E6A54DA2B4A490E095153190016F45C; Installed: Absent; Request: Local; Action: Local; Client State: Unknown
MSI (s) (54:B4) [16:04:26:059]: Component: cmpF19FC45F8493A161800E6BE56D4A1756; Installed: Absent; Request: Local; Action: Local; Client State: Unknown
MSI (s) (54:B4) [16:04:26:059]: Component: cmp8C5829A09EED9E34114BD963BF21A056; Installed: Absent; Request: Local; Action: Local; Client State: Unknown
MSI (s) (54:B4) [16:04:26:059]: Component: cmp3715D672EFFF315EE2335C4E3A14E554; Installed: Absent; Request: Local; Action: Local; Client State: Unknown
MSI (s) (54:B4) [16:04:26:059]: Component: cmp926A298D066099C96C46FED7786788E0; Installed: Absent; Request: Local; Action: Local; Client State: Unknown
MSI (s) (54:B4) [16:04:26:059]: Component: cmpC204399AEB91E0E43212B8141B72EDA3; Installed: Absent; Request: Local; Action: Local; Client State: Unknown
MSI (s) (54:B4) [16:04:26:059]: Component: cmp144B8DF33D500516CC0039FF00586CBB; Installed: Absent; Request: Local; Action: Local; Client State: Unknown
MSI (s) (54:B4) [16:04:26:059]: Component: cmpA17E8054C147A42B303A4F30EC548C28; Installed: Absent; Request: Local; Action: Local; Client State: Unknown
MSI (s) (54:B4) [16:04:26:059]: Component: cmpB25104F7B37109E4F0AB69F9600248A6; Installed: Absent; Request: Local; Action: Local; Client State: Unknown
MSI (s) (54:B4) [16:04:26:059]: Component: cmpC72B8115700502E53DB96128E0FB0F12; Installed: Absent; Request: Local; Action: Local; Client State: Unknown
MSI (s) (54:B4) [16:04:26:059]: Component: cmp85B30FE6C21428582ED75DA9591F7841; Installed: Absent; Request: Local; Action: Local; Client State: Unknown
MSI (s) (54:B4) [16:04:26:059]: Component: cmpF44F579DB331EB1CA704187A29DADC27; Installed: Absent; Request: Local; Action: Local; Client State: Unknown
MSI (s) (54:B4) [16:04:26:059]: Component: cmp734B57F3E0D64478FF886B8B7F0855D0; Installed: Absent; Request: Local; Action: Local; Client State: Unknown
MSI (s) (54:B4) [16:04:26:059]: Component: cmpE98DA93C0601FBE21FB7F40C66B20088; Installed: Absent; Request: Local; Action: Local; Client State: Unknown
MSI (s) (54:B4) [16:04:26:059]: Component: cmp9614D24E7DE47DD030894F0FF3F69A88; Installed: Absent; Request: Local; Action: Local; Client State: Unknown
MSI (s) (54:B4) [16:04:26:059]: Component: cmp58AB6562B9D3ED526E41358DF5781B50; Installed: Absent; Request: Local; Action: Local; Client State: Unknown
MSI (s) (54:B4) [16:04:26:059]: Component: cmp091C203EE44CB4C07729B19DF08D1AFC; Installed: Absent; Request: Local; Action: Local; Client State: Unknown
MSI (s) (54:B4) [16:04:26:059]: Component: cmp029C8699BD5A4FA4D17AB199752B5B96; Installed: Absent; Request: Local; Action: Local; Client State: Unknown
MSI (s) (54:B4) [16:04:26:059]: Component: cmp049296C3567A2274C8BA2D425B03D724; Installed: Absent; Request: Local; Action: Local; Client State: Unknown
MSI (s) (54:B4) [16:04:26:059]: Component: cmp9ED9D6ADAF6A1AA6BC4487683F9A8843; Installed: Absent; Request: Local; Action: Local; Client State: Unknown
MSI (s) (54:B4) [16:04:26:059]: Component: cmp3B2E907389989A4E799C07E57E1EBDBF; Installed: Absent; Request: Local; Action: Local; Client State: Unknown
MSI (s) (54:B4) [16:04:26:059]: Component: cmp0508B803254970B386712B625649B662; Installed: Absent; Request: Local; Action: Local; Client State: Unknown
MSI (s) (54:B4) [16:04:26:059]: Component: cmp67FEAE576DF6621471C42B01EA270447; Installed: Absent; Request: Local; Action: Local; Client State: Unknown
MSI (s) (54:B4) [16:04:26:059]: Component: cmpA78809E407491A131F91CE7A05B821FA; Installed: Absent; Request: Local; Action: Local; Client State: Unknown
MSI (s) (54:B4) [16:04:26:059]: Component: cmp7DA7D51EE24B33901BE9437EFB1104BA; Installed: Absent; Request: Local; Action: Local; Client State: Unknown
MSI (s) (54:B4) [16:04:26:059]: Component: cmp15F9AE58C95A1761F129C1B433D9B7B3; Installed: Absent; Request: Local; Action: Local; Client State: Unknown
MSI (s) (54:B4) [16:04:26:059]: Component: cmp66EA9B4DFEAD7FCD57BA16696942DE87; Installed: Absent; Request: Local; Action: Local; Client State: Unknown
MSI (s) (54:B4) [16:04:26:059]: Component: cmp7D6C5765AD2040DFD38D7F910C60B466; Installed: Absent; Request: Local; Action: Local; Client State: Unknown
MSI (s) (54:B4) [16:04:26:059]: Component: cmp1ED46B4FC540F21CC2A0BBF88DEEB3D4; Installed: Absent; Request: Local; Action: Local; Client State: Unknown
MSI (s) (54:B4) [16:04:26:059]: Component: cmp84B2E4F64941312B2A76F617A16C43ED; Installed: Absent; Request: Local; Action: Local; Client State: Unknown
MSI (s) (54:B4) [16:04:26:059]: Component: cmp61527E905D004E77A3FCD14AAB3F0FCF; Installed: Absent; Request: Local; Action: Local; Client State: Unknown
MSI (s) (54:B4) [16:04:26:059]: Component: cmpF7E11211BC3BB6F244C70DECD664B784; Installed: Absent; Request: Local; Action: Local; Client State: Unknown
MSI (s) (54:B4) [16:04:26:059]: Component: cmp03E43CF0122452C41D7F9B1627462F1F; Installed: Absent; Request: Local; Action: Local; Client State: Unknown
MSI (s) (54:B4) [16:04:26:059]: Component: cmp39F1236E9A95142BD684876C3D0561D8; Installed: Absent; Request: Local; Action: Local; Client State: Unknown
MSI (s) (54:B4) [16:04:26:059]: Component: cmp0C8C2608A5032C41D258D98C8AFCA289; Installed: Absent; Request: Local; Action: Local; Client State: Unknown
MSI (s) (54:B4) [16:04:26:059]: Component: cmp4930DABA99F482163C437C7CC976896A; Installed: Absent; Request: Local; Action: Local; Client State: Unknown
MSI (s) (54:B4) [16:04:26:059]: Component: cmp40190E649BB5C18323075D6DD25E07EB; Installed: Absent; Request: Local; Action: Local; Client State: Unknown
MSI (s) (54:B4) [16:04:26:059]: Component: cmp77BC9661C9BB5197D87F3A8126D6B247; Installed: Absent; Request: Local; Action: Local; Client State: Unknown
MSI (s) (54:B4) [16:04:26:059]: Component: cmp0570778E972F28CC852B37F1580425C1; Installed: Absent; Request: Local; Action: Local; Client State: Unknown
MSI (s) (54:B4) [16:04:26:059]: Component: cmp322FD701A4F99F8453A6750F5BCA3FC0; Installed: Absent; Request: Local; Action: Local; Client State: Unknown
MSI (s) (54:B4) [16:04:26:059]: Component: cmp486AB834F182496E0D31261CFB364DB4; Installed: Absent; Request: Local; Action: Local; Client State: Unknown
MSI (s) (54:B4) [16:04:26:059]: Component: cmp188891FCAFDF19D326D0FB77B2997326; Installed: Absent; Request: Local; Action: Local; Client State: Unknown
MSI (s) (54:B4) [16:04:26:059]: Component: cmpD39F479F516DB0D9E76199C3E41265E0; Installed: Absent; Request: Local; Action: Local; Client State: Unknown
MSI (s) (54:B4) [16:04:26:059]: Component: cmp4622C7482CD949F6F93B4C5DE703D2F1; Installed: Absent; Request: Local; Action: Local; Client State: Unknown
MSI (s) (54:B4) [16:04:26:059]: Component: cmpC0D2A44BD0A3176D91AA5172093DFA96; Installed: Absent; Request: Local; Action: Local; Client State: Unknown
MSI (s) (54:B4) [16:04:26:059]: Component: cmpDE071C6711A4357A4B1AF4ADD7CE194E; Installed: Absent; Request: Local; Action: Local; Client State: Unknown
MSI (s) (54:B4) [16:04:26:059]: Component: cmp86A962CD0089D9A4B9D5EDE98C7616B7; Installed: Absent; Request: Local; Action: Local; Client State: Unknown
MSI (s) (54:B4) [16:04:26:059]: Component: cmpBBE5475F1E192F310823493DE808CE41; Installed: Absent; Request: Local; Action: Local; Client State: Unknown
MSI (s) (54:B4) [16:04:26:059]: Component: cmp868D431F737ED69C51EE7C9DFAD08F60; Installed: Absent; Request: Local; Action: Local; Client State: Unknown
MSI (s) (54:B4) [16:04:26:059]: Component: cmp1C03345EB4DCBCC70E755AF7C275B194; Installed: Absent; Request: Local; Action: Local; Client State: Unknown
MSI (s) (54:B4) [16:04:26:059]: Component: cmpD8867E75A35474A93F700613793070FB; Installed: Absent; Request: Local; Action: Local; Client State: Unknown
MSI (s) (54:B4) [16:04:26:059]: Component: cmpA7154D9F0135447CE7F2C4830D2CFA18; Installed: Absent; Request: Local; Action: Local; Client State: Unknown
MSI (s) (54:B4) [16:04:26:059]: Component: cmp9F604F94A4BFF7CA044D5298C98D935C; Installed: Absent; Request: Local; Action: Local; Client State: Unknown
MSI (s) (54:B4) [16:04:26:059]: Component: cmp02EFDA5E36D3C0CF61196392473BC323; Installed: Absent; Request: Local; Action: Local; Client State: Unknown
MSI (s) (54:B4) [16:04:26:059]: Component: cmp6E9CA4B720C30506D126235DC890A942; Installed: Absent; Request: Local; Action: Local; Client State: Unknown
MSI (s) (54:B4) [16:04:26:059]: Component: cmpE8FE55284C8492E9F2E9619144CCE15C; Installed: Absent; Request: Local; Action: Local; Client State: Unknown
MSI (s) (54:B4) [16:04:26:059]: Component: cmp387F207C1CE21B72833A9F196D845EF1; Installed: Absent; Request: Local; Action: Local; Client State: Unknown
MSI (s) (54:B4) [16:04:26:059]: Component: cmp36FB62FD2F90CDAF9E394BF9F9B343CC; Installed: Absent; Request: Local; Action: Local; Client State: Unknown
MSI (s) (54:B4) [16:04:26:059]: Component: cmp8A9C5C7EC3081006B10BA41C509F1E23; Installed: Absent; Request: Local; Action: Local; Client State: Unknown
MSI (s) (54:B4) [16:04:26:059]: Component: cmp5C171522205F034011E24A070C9FA573; Installed: Absent; Request: Local; Action: Local; Client State: Unknown
MSI (s) (54:B4) [16:04:26:059]: Component: cmp935A70F8B9B2D3A5782A176FBEDC6C3A; Installed: Absent; Request: Local; Action: Local; Client State: Unknown
MSI (s) (54:B4) [16:04:26:059]: Component: cmp515C609CDC6312D461A837AD81264090; Installed: Absent; Request: Local; Action: Local; Client State: Unknown
MSI (s) (54:B4) [16:04:26:059]: Component: cmp1920C35AA833B159EBB7A6F27CC49896; Installed: Absent; Request: Local; Action: Local; Client State: Unknown
MSI (s) (54:B4) [16:04:26:059]: Component: cmp52F243C2E1E837B8CE77E0777E64D37C; Installed: Absent; Request: Local; Action: Local; Client State: Unknown
MSI (s) (54:B4) [16:04:26:059]: Component: cmp6E941D9A47B7D452C8C180281572B690; Installed: Absent; Request: Local; Action: Local; Client State: Unknown
MSI (s) (54:B4) [16:04:26:059]: Component: cmpBBE8C77B35626E4ADC7405E3958077E6; Installed: Absent; Request: Local; Action: Local; Client State: Unknown
MSI (s) (54:B4) [16:04:26:059]: Component: cmp9B06737A3161FE1AC2F35C20FF10263B; Installed: Absent; Request: Local; Action: Local; Client State: Unknown
MSI (s) (54:B4) [16:04:26:059]: Component: cmp0B38DB626F944D7996C05A286A894EF9; Installed: Absent; Request: Local; Action: Local; Client State: Unknown
MSI (s) (54:B4) [16:04:26:059]: Component: cmp414729DB8057F3609B35E62E3C8B5152; Installed: Absent; Request: Local; Action: Local; Client State: Unknown
MSI (s) (54:B4) [16:04:26:059]: Component: cmp6362FC0BC99D104E528F1D829EBB6577; Installed: Absent; Request: Local; Action: Local; Client State: Unknown
MSI (s) (54:B4) [16:04:26:059]: Component: cmpB53CE03C8162FBB8ADE36524E86A02D8; Installed: Absent; Request: Local; Action: Local; Client State: Unknown
MSI (s) (54:B4) [16:04:26:059]: Component: cmp36C0DAB40AD7E2EECACB3AE422E289E8; Installed: Absent; Request: Local; Action: Local; Client State: Unknown
MSI (s) (54:B4) [16:04:26:059]: Component: cmpC6363BE8B79DDFD0F9571A9FEC9B258C; Installed: Absent; Request: Local; Action: Local; Client State: Unknown
MSI (s) (54:B4) [16:04:26:059]: Component: cmp57DB4B0DEF7B764503C35E2B91AEB6F4; Installed: Absent; Request: Local; Action: Local; Client State: Unknown
MSI (s) (54:B4) [16:04:26:059]: Component: cmpCAEA2C9EAFE89CE83198BF4098590A9D; Installed: Absent; Request: Local; Action: Local; Client State: Unknown
MSI (s) (54:B4) [16:04:26:059]: Component: cmp272C235D2856EBDA82B69628947E1E15; Installed: Absent; Request: Local; Action: Local; Client State: Unknown
MSI (s) (54:B4) [16:04:26:059]: Component: cmp91B5D1FC4A2E314BA45FFA4FFEF2C14D; Installed: Absent; Request: Local; Action: Local; Client State: Unknown
MSI (s) (54:B4) [16:04:26:059]: Component: cmpE8EF3D1DFD8876273CE21D27702C38CE; Installed: Absent; Request: Local; Action: Local; Client State: Unknown
MSI (s) (54:B4) [16:04:26:059]: Component: cmpDED4C36F53A107161304882B52F8C744; Installed: Absent; Request: Local; Action: Local; Client State: Unknown
MSI (s) (54:B4) [16:04:26:059]: Component: cmp514384A6F20B50AF89D8B5F577C37AA9; Installed: Absent; Request: Local; Action: Local; Client State: Unknown
MSI (s) (54:B4) [16:04:26:059]: Component: cmp0A2E1FF4D81B282760FFC2E3FF72A75D; Installed: Absent; Request: Local; Action: Local; Client State: Unknown
MSI (s) (54:B4) [16:04:26:059]: Component: cmp3B0F313F315B838AF334203582E3D502; Installed: Absent; Request: Local; Action: Local; Client State: Unknown
MSI (s) (54:B4) [16:04:26:059]: Component: cmp50D130E709C16E8C45AD9147E0B9078A; Installed: Absent; Request: Local; Action: Local; Client State: Unknown
MSI (s) (54:B4) [16:04:26:059]: Component: cmp03ADB219D2E85841DFB96898F391AF72; Installed: Absent; Request: Local; Action: Local; Client State: Unknown
MSI (s) (54:B4) [16:04:26:059]: Component: cmpD420FCA1949B2E81AA223DDE85ADC21D; Installed: Absent; Request: Local; Action: Local; Client State: Unknown
MSI (s) (54:B4) [16:04:26:059]: Component: cmp11B30C32C9D12E6D1E3CAF669DB1A671; Installed: Absent; Request: Local; Action: Local; Client State: Unknown
MSI (s) (54:B4) [16:04:26:059]: Component: cmp6A3389D18674C8E1EBE11BC8F92AB5CB; Installed: Absent; Request: Local; Action: Local; Client State: Unknown
MSI (s) (54:B4) [16:04:26:059]: Component: cmp36248D92A9D9755BC4F24301DC659AD7; Installed: Absent; Request: Local; Action: Local; Client State: Unknown
MSI (s) (54:B4) [16:04:26:059]: Component: cmp499E8BE9CA0C93FB36709E9BD9A2F869; Installed: Absent; Request: Local; Action: Local; Client State: Unknown
MSI (s) (54:B4) [16:04:26:059]: Component: cmp496FEAC80CEC965D15D583213F217FFC; Installed: Absent; Request: Local; Action: Local; Client State: Unknown
MSI (s) (54:B4) [16:04:26:059]: Component: cmp4991C3F715049B5204FDA187CE95B67E; Installed: Absent; Request: Local; Action: Local; Client State: Unknown
MSI (s) (54:B4) [16:04:26:059]: Component: cmp771F88B7A4853D55FBEAAA8A7B0953AC; Installed: Absent; Request: Local; Action: Local; Client State: Unknown
MSI (s) (54:B4) [16:04:26:059]: Component: cmpBF884A7E08857B311E4D522F1AB9F8EC; Installed: Absent; Request: Local; Action: Local; Client State: Unknown
MSI (s) (54:B4) [16:04:26:059]: Component: cmp2BC61D031FEEF13E698E077772AF4891; Installed: Absent; Request: Local; Action: Local; Client State: Unknown
MSI (s) (54:B4) [16:04:26:059]: Component: cmp9842D9B41EA133B80F303FCD64CA1683; Installed: Absent; Request: Local; Action: Local; Client State: Unknown
MSI (s) (54:B4) [16:04:26:059]: Component: cmp8D20E2A6A562525F688F52DD45FF78C2; Installed: Absent; Request: Local; Action: Local; Client State: Unknown
MSI (s) (54:B4) [16:04:26:059]: Note: 1: 2205 2: 3: Registry
MSI (s) (54:B4) [16:04:26:059]: Note: 1: 2205 2: 3: BindImage
MSI (s) (54:B4) [16:04:26:059]: Note: 1: 2205 2: 3: ProgId
MSI (s) (54:B4) [16:04:26:059]: Note: 1: 2205 2: 3: PublishComponent
MSI (s) (54:B4) [16:04:26:059]: Note: 1: 2205 2: 3: SelfReg
MSI (s) (54:B4) [16:04:26:059]: Note: 1: 2205 2: 3: Extension
MSI (s) (54:B4) [16:04:26:059]: Note: 1: 2205 2: 3: Font
MSI (s) (54:B4) [16:04:26:059]: Note: 1: 2205 2: 3: Shortcut
MSI (s) (54:B4) [16:04:26:059]: Note: 1: 2205 2: 3: Class
MSI (s) (54:B4) [16:04:26:059]: Note: 1: 2205 2: 3: TypeLib
MSI (s) (54:B4) [16:04:26:059]: Note: 1: 2205 2: 3: _RemoveFilePath
MSI (s) (54:B4) [16:04:26:233]: PROPERTY CHANGE: Modifying CostingComplete property. Its current value is '0'. Its new value: '1'.
MSI (s) (54:B4) [16:04:26:233]: Note: 1: 2205 2: 3: Registry
MSI (s) (54:B4) [16:04:26:233]: Note: 1: 2205 2: 3: BindImage
MSI (s) (54:B4) [16:04:26:233]: Note: 1: 2205 2: 3: ProgId
MSI (s) (54:B4) [16:04:26:233]: Note: 1: 2205 2: 3: PublishComponent
MSI (s) (54:B4) [16:04:26:233]: Note: 1: 2205 2: 3: SelfReg
MSI (s) (54:B4) [16:04:26:233]: Note: 1: 2205 2: 3: Extension
MSI (s) (54:B4) [16:04:26:233]: Note: 1: 2205 2: 3: Font
MSI (s) (54:B4) [16:04:26:233]: Note: 1: 2205 2: 3: Shortcut
MSI (s) (54:B4) [16:04:26:233]: Note: 1: 2205 2: 3: Class
MSI (s) (54:B4) [16:04:26:233]: Note: 1: 2205 2: 3: TypeLib
MSI (s) (54:B4) [16:04:26:233]: Note: 1: 2727 2:
MSI (s) (54:B4) [16:04:26:233]: Note: 1: 2727 2:
Action ended 16:04:26: InstallValidate. Return value 1.
MSI (s) (54:B4) [16:04:26:233]: Doing action: InstallInitialize
MSI (s) (54:B4) [16:04:26:233]: Note: 1: 2205 2: 3: ActionText
Action 16:04:26: InstallInitialize.
Action start 16:04:26: InstallInitialize.
MSI (s) (54:B4) [16:04:26:233]: Machine policy value 'AlwaysInstallElevated' is 0
MSI (s) (54:B4) [16:04:26:233]: User policy value 'AlwaysInstallElevated' is 0
MSI (s) (54:B4) [16:04:26:233]: BeginTransaction: Locking Server
MSI (s) (54:B4) [16:04:26:233]: Note: 1: 2203 2: C:\Windows\Installer\inprogressinstallinfo.ipi 3: -2147287038
MSI (s) (54:B4) [16:04:26:233]: Note: 1: 1715 2: UniversalForwarder
MSI (s) (54:B4) [16:04:26:233]: Note: 1: 2205 2: 3: Error
MSI (s) (54:B4) [16:04:26:233]: Note: 1: 2228 2: 3: Error 4: SELECT `Message` FROM `Error` WHERE `Error` = 1715
MSI (s) (54:B4) [16:04:26:233]: Calling SRSetRestorePoint API. dwRestorePtType: 0, dwEventType: 102, llSequenceNumber: 0, szDescription: "Installed UniversalForwarder".
MSI (s) (54:B4) [16:04:26:233]: The call to SRSetRestorePoint API failed. Returned status: 0. GetLastError() returned: 127
MSI (s) (54:B4) [16:04:26:233]: Note: 1: 2203 2: C:\Windows\Installer\inprogressinstallinfo.ipi 3: -2147287038
MSI (s) (54:B4) [16:04:26:233]: Server not locked: locking for product {D77B0D44-D35B-4BD3-A54E-89CBAE2086E6}
Action ended 16:04:26: InstallInitialize. Return value 1.
MSI (s) (54:B4) [16:04:26:233]: Skipping action: RemoveExistingProducts (condition is false)
MSI (s) (54:B4) [16:04:26:233]: Doing action: SaveInstallLocation
MSI (s) (54:B4) [16:04:26:233]: Note: 1: 2205 2: 3: ActionText
Action 16:04:26: SaveInstallLocation.
Action start 16:04:26: SaveInstallLocation.
MSI (s) (54:B4) [16:04:26:233]: PROPERTY CHANGE: Adding ARPINSTALLLOCATION property. Its value is 'C:\Program Files\SplunkUniversalForwarder\'.
Action ended 16:04:26: SaveInstallLocation. Return value 1.
MSI (s) (54:B4) [16:04:26:233]: Doing action: CheckLicenseAgreement
MSI (s) (54:B4) [16:04:26:233]: Note: 1: 2205 2: 3: ActionText
Action 16:04:26: CheckLicenseAgreement.
Action start 16:04:26: CheckLicenseAgreement.
MSI (s) (54:B4) [16:04:26:233]: Creating MSIHANDLE (77) of type 790542 for thread 9652
MSI (s) (54:04) [16:04:26:233]: Invoking remote custom action. DLL: C:\Windows\Installer\MSI2F42.tmp, Entrypoint: CheckLicenseAgreementCA
MSI (s) (54!1C) [16:04:26:248]: Creating MSIHANDLE (78) of type 790541 for thread 10012
MSI (s) (54!1C) [16:04:26:248]: Creating MSIHANDLE (79) of type 790531 for thread 10012
CheckLicenseAgreement: Entering CheckLicenseAgreement in C:\Windows\Installer\MSI2F42.tmp, version 0.0.0.0
MSI (s) (54!1C) [16:04:26:248]: Closing MSIHANDLE (79) of type 790531 for thread 10012
MSI (s) (54!1C) [16:04:26:248]: Closing MSIHANDLE (78) of type 790541 for thread 10012
MSI (s) (54:04) [16:04:26:248]: Closing MSIHANDLE (77) of type 790542 for thread 9652
Action ended 16:04:26: CheckLicenseAgreement. Return value 1.
MSI (s) (54:B4) [16:04:26:248]: Doing action: CheckServers
MSI (s) (54:B4) [16:04:26:248]: Note: 1: 2205 2: 3: ActionText
Action 16:04:26: CheckServers.
Action start 16:04:26: CheckServers.
MSI (s) (54:B4) [16:04:26:248]: Creating MSIHANDLE (80) of type 790542 for thread 9652
MSI (s) (54:30) [16:04:26:248]: Invoking remote custom action. DLL: C:\Windows\Installer\MSI2F53.tmp, Entrypoint: CheckServersCA
MSI (s) (54!14) [16:04:26:264]: Creating MSIHANDLE (81) of type 790541 for thread 8980
MSI (s) (54!14) [16:04:26:264]: Creating MSIHANDLE (82) of type 790531 for thread 8980
CheckServers: Entering CheckServers in C:\Windows\Installer\MSI2F53.tmp, version 0.0.0.0
MSI (s) (54!14) [16:04:26:264]: Closing MSIHANDLE (82) of type 790531 for thread 8980
MSI (s) (54!14) [16:04:26:264]: Closing MSIHANDLE (81) of type 790541 for thread 8980
MSI (s) (54:30) [16:04:26:264]: Closing MSIHANDLE (80) of type 790542 for thread 9652
Action ended 16:04:26: CheckServers. Return value 1.
MSI (s) (54:B4) [16:04:26:264]: Doing action: ProcessComponents
MSI (s) (54:B4) [16:04:26:264]: Note: 1: 2205 2: 3: ActionText
Action 16:04:26: ProcessComponents. Updating component registration
Action start 16:04:26: ProcessComponents.
MSI (s) (54:B4) [16:04:26:264]: Note: 1: 2205 2: 3: MsiPatchCertificate
MSI (s) (54:B4) [16:04:26:264]: LUA patching is disabled: missing MsiPatchCertificate table
MSI (s) (54:B4) [16:04:26:264]: Resolving source.
MSI (s) (54:B4) [16:04:26:264]: Resolving source to launched-from source.
MSI (s) (54:B4) [16:04:26:264]: Setting launched-from source as last-used.
MSI (s) (54:B4) [16:04:26:264]: PROPERTY CHANGE: Adding SourceDir property. Its value is 'D:\Install\'.
MSI (s) (54:B4) [16:04:26:264]: PROPERTY CHANGE: Adding SOURCEDIR property. Its value is 'D:\Install\'.
MSI (s) (54:B4) [16:04:26:264]: PROPERTY CHANGE: Adding SourcedirProduct property. Its value is '{D77B0D44-D35B-4BD3-A54E-89CBAE2086E6}'.
MSI (s) (54:B4) [16:04:26:264]: SOURCEDIR ==> D:\Install\
MSI (s) (54:B4) [16:04:26:264]: SOURCEDIR product ==> {D77B0D44-D35B-4BD3-A54E-89CBAE2086E6}
MSI (s) (54:B4) [16:04:26:264]: SECREPAIR: CryptAcquireContext succeeded
MSI (s) (54:B4) [16:04:26:264]: Determining source type
MSI (s) (54:B4) [16:04:26:264]: Source type from package 'splunkforwarder-6.2.2-255606-x64-release.msi': 2
MSI (s) (54:B4) [16:04:26:264]: SECREPAIR: Hash Database: C:\Windows\Installer\SourceHash{D77B0D44-D35B-4BD3-A54E-89CBAE2086E6}
MSI (s) (54:B4) [16:04:26:264]: Note: 1: 2262 2: SourceHash 3: -2147287038
MSI (s) (54:B4) [16:04:26:264]: SECREPAIR: New Hash Database creation complete.
MSI (s) (54:B4) [16:04:26:592]: SECREPAIR: Hash Value for the file:splunkforwarder-6.2.2-255606-x64-release.msi is: gbH8UVG80p/yRT2YgwQ63UqCRB5+xzqy6LQfqfdx56Q=
MSI (s) (54:B4) [16:04:26:592]: Source path resolution complete. Dumping Directory table...
MSI (s) (54:B4) [16:04:26:592]: Dir (source): Key: TARGETDIR , Object: D:\Install\ , LongSubPath: , ShortSubPath:
MSI (s) (54:B4) [16:04:26:592]: Dir (source): Key: ProgramFiles64Folder , Object: D:\Install\ , LongSubPath: , ShortSubPath:
MSI (s) (54:B4) [16:04:26:592]: Dir (source): Key: INSTALLDIR , Object: D:\Install\ , LongSubPath: SplunkUniversalForwarder\ , ShortSubPath: w89duo8g\
MSI (s) (54:B4) [16:04:26:592]: Dir (source): Key: dir9777D8246D1EFF4BCE1BBB3725F54761 , Object: D:\Install\ , LongSubPath: SplunkUniversalForwarder\share\ , ShortSubPath: w89duo8g\share\
MSI (s) (54:B4) [16:04:26:592]: Dir (source): Key: dirD3369B4CFA7BF6DCB57584A7F452CA0A , Object: D:\Install\ , LongSubPath: SplunkUniversalForwarder\share\splunk\ , ShortSubPath: w89duo8g\share\splunk\
MSI (s) (54:B4) [16:04:26:592]: Dir (source): Key: dir9DF6D6597089BA01028EE58CBBF75736 , Object: D:\Install\ , LongSubPath: SplunkUniversalForwarder\share\splunk\3rdparty\ , ShortSubPath: w89duo8g\share\splunk\3rdparty\
MSI (s) (54:B4) [16:04:26:592]: Dir (source): Key: dirCC4BF51C3FB0120CE9B785729700549B , Object: D:\Install\ , LongSubPath: SplunkUniversalForwarder\lib\ , ShortSubPath: w89duo8g\lib\
MSI (s) (54:B4) [16:04:26:592]: Dir (source): Key: dir3E02976F57563947ADB6A8038DF4FCEF , Object: D:\Install\ , LongSubPath: SplunkUniversalForwarder\etc\ , ShortSubPath: w89duo8g\etc\
MSI (s) (54:B4) [16:04:26:592]: Dir (source): Key: dirCFB1DCA36329665F066AABF5013AECA9 , Object: D:\Install\ , LongSubPath: SplunkUniversalForwarder\etc\system\ , ShortSubPath: w89duo8g\etc\system\
MSI (s) (54:B4) [16:04:26:592]: Dir (source): Key: dir087F918F10A120B6907E2460F0868A49 , Object: D:\Install\ , LongSubPath: SplunkUniversalForwarder\etc\system\static\ , ShortSubPath: w89duo8g\etc\system\static\
MSI (s) (54:B4) [16:04:26:592]: Dir (source): Key: dir5083584ADFC4261D3780F7B66CB3B7B3 , Object: D:\Install\ , LongSubPath: SplunkUniversalForwarder\etc\system\README\ , ShortSubPath: w89duo8g\etc\system\README\
MSI (s) (54:B4) [16:04:26:592]: Dir (source): Key: dir858D19BEE324185B277CA79FFC48EDEE , Object: D:\Install\ , LongSubPath: SplunkUniversalForwarder\etc\system\metadata\ , ShortSubPath: w89duo8g\etc\system\metadata\
MSI (s) (54:B4) [16:04:26:592]: Dir (source): Key: dirD3351CCE95594E87E2CC36C1024B5B4C , Object: D:\Install\ , LongSubPath: SplunkUniversalForwarder\etc\system\local\ , ShortSubPath: w89duo8g\etc\system\local\
MSI (s) (54:B4) [16:04:26:592]: Dir (source): Key: dirBAC85229BB4A3494F5ECCB42AA1B824B , Object: D:\Install\ , LongSubPath: SplunkUniversalForwarder\etc\system\default\ , ShortSubPath: w89duo8g\etc\system\default\
MSI (s) (54:B4) [16:04:26:592]: Dir (source): Key: dir5320F257A67DB36A4CED85E00FC63DD0 , Object: D:\Install\ , LongSubPath: SplunkUniversalForwarder\etc\system\bin\ , ShortSubPath: w89duo8g\etc\system\bin\
MSI (s) (54:B4) [16:04:26:592]: Dir (source): Key: dir6EEC3061DFBF56B9D6D2F8CBEC90FE26 , Object: D:\Install\ , LongSubPath: SplunkUniversalForwarder\etc\shcluster\ , ShortSubPath: w89duo8g\etc\2_slpnbx\
MSI (s) (54:B4) [16:04:26:592]: Dir (source): Key: dir7A9E1C63375946BEF53B8BCD2F9EB32B , Object: D:\Install\ , LongSubPath: SplunkUniversalForwarder\etc\shcluster\users\ , ShortSubPath: w89duo8g\etc\2_slpnbx\users\
MSI (s) (54:B4) [16:04:26:592]: Dir (source): Key: dir62FE35BBE7BD45CAEAB9D4261B2C1DA9 , Object: D:\Install\ , LongSubPath: SplunkUniversalForwarder\etc\shcluster\apps\ , ShortSubPath: w89duo8g\etc\2_slpnbx\apps\
MSI (s) (54:B4) [16:04:26:592]: Dir (source): Key: dirEA4E77DDDE1ED87692CD92A2F7477FDA , Object: D:\Install\ , LongSubPath: SplunkUniversalForwarder\etc\myinstall\ , ShortSubPath: w89duo8g\etc\rvkc0wmc\
MSI (s) (54:B4) [16:04:26:592]: Dir (source): Key: dir613AD2632481811E0F84C80F31F4CD56 , Object: D:\Install\ , LongSubPath: SplunkUniversalForwarder\etc\modules\ , ShortSubPath: w89duo8g\etc\modules\
MSI (s) (54:B4) [16:04:26:592]: Dir (source): Key: dir36980B38D75840D0DF3C22965AFE352F , Object: D:\Install\ , LongSubPath: SplunkUniversalForwarder\etc\modules\parsing\ , ShortSubPath: w89duo8g\etc\modules\parsing\
MSI (s) (54:B4) [16:04:26:592]: Dir (source): Key: dir4B3ADB252806E43AB420F8399AC61D45 , Object: D:\Install\ , LongSubPath: SplunkUniversalForwarder\etc\modules\input\ , ShortSubPath: w89duo8g\etc\modules\input\
MSI (s) (54:B4) [16:04:26:592]: Dir (source): Key: dir08A71AA8240CE634F2916BD8FD86AE9D , Object: D:\Install\ , LongSubPath: SplunkUniversalForwarder\etc\modules\input\winparsing\ , ShortSubPath: w89duo8g\etc\modules\input\a0v-kg5d\
MSI (s) (54:B4) [16:04:26:592]: Dir (source): Key: dir350E86D3D8394619D5C56BE268AB8C03 , Object: D:\Install\ , LongSubPath: SplunkUniversalForwarder\etc\modules\input\wineventlog\ , ShortSubPath: w89duo8g\etc\modules\input\mtkm03vq\
MSI (s) (54:B4) [16:04:26:592]: Dir (source): Key: dir500C5AB468B41B12914CAFC92914BB04 , Object: D:\Install\ , LongSubPath: SplunkUniversalForwarder\etc\modules\input\UDP\ , ShortSubPath: w89duo8g\etc\modules\input\UDP\
MSI (s) (54:B4) [16:04:26:592]: Dir (source): Key: dir40C5047ABE9F85BC416CF37384338C22 , Object: D:\Install\ , LongSubPath: SplunkUniversalForwarder\etc\modules\input\TCP\ , ShortSubPath: w89duo8g\etc\modules\input\TCP\
MSI (s) (54:B4) [16:04:26:592]: Dir (source): Key: dirAAE2EA6FF6BFF3615E0F6ECB4F8B8317 , Object: D:\Install\ , LongSubPath: SplunkUniversalForwarder\etc\modules\input\tailfile\ , ShortSubPath: w89duo8g\etc\modules\input\tailfile\
MSI (s) (54:B4) [16:04:26:592]: Dir (source): Key: dir623F2857FD6CE56C0C7472F3CF4B157E , Object: D:\Install\ , LongSubPath: SplunkUniversalForwarder\etc\modules\input\structuredparsing\ , ShortSubPath: w89duo8g\etc\modules\input\e7vfx0je\
MSI (s) (54:B4) [16:04:26:592]: Dir (source): Key: dir3C58D8B9DB7081CC9C009A2FA233FFFD , Object: D:\Install\ , LongSubPath: SplunkUniversalForwarder\etc\modules\input\fschangemanager\ , ShortSubPath: w89duo8g\etc\modules\input\8aifimk6\
MSI (s) (54:B4) [16:04:26:592]: Dir (source): Key: dir3F2ED1881D5C561B698B737D96419537 , Object: D:\Install\ , LongSubPath: SplunkUniversalForwarder\etc\modules\input\exec\ , ShortSubPath: w89duo8g\etc\modules\input\exec\
MSI (s) (54:B4) [16:04:26:592]: Dir (source): Key: dirA6241AC9F2CFDD1D7D4327FB5A124C92 , Object: D:\Install\ , LongSubPath: SplunkUniversalForwarder\etc\disabled-apps\ , ShortSubPath: w89duo8g\etc\d7abrfwm\
MSI (s) (54:B4) [16:04:26:592]: Dir (source): Key: dir67189055EBCF5D1437F0A9D30368ED9C , Object: D:\Install\ , LongSubPath: SplunkUniversalForwarder\etc\deployment-apps\ , ShortSubPath: w89duo8g\etc\607fxfsu\
MSI (s) (54:B4) [16:04:26:592]: Dir (source): Key: dir2A81299A0652E91159BE1994DD92316A , Object: D:\Install\ , LongSubPath: SplunkUniversalForwarder\etc\auth\ , ShortSubPath: w89duo8g\etc\auth\
MSI (s) (54:B4) [16:04:26:592]: Dir (source): Key: dirB06939592AE1B7F84A5F1802888016F6 , Object: D:\Install\ , LongSubPath: SplunkUniversalForwarder\etc\apps\ , ShortSubPath: w89duo8g\etc\apps\
MSI (s) (54:B4) [16:04:26:592]: Dir (source): Key: dir060491FD1B1F02D6FE725F0B7611F71E , Object: D:\Install\ , LongSubPath: SplunkUniversalForwarder\etc\apps\SplunkUniversalForwarder\ , ShortSubPath: w89duo8g\etc\apps\0k4ci1p3\
MSI (s) (54:B4) [16:04:26:592]: Dir (source): Key: dirF389DCA026B8D0A2E829970DE12F66F0 , Object: D:\Install\ , LongSubPath: SplunkUniversalForwarder\etc\apps\SplunkUniversalForwarder\metadata\ , ShortSubPath: w89duo8g\etc\apps\0k4ci1p3\metadata\
MSI (s) (54:B4) [16:04:26:592]: Dir (source): Key: dir2D2122E4CFDE8C263EEE7452554D6DA2 , Object: D:\Install\ , LongSubPath: SplunkUniversalForwarder\etc\apps\SplunkUniversalForwarder\default\ , ShortSubPath: w89duo8g\etc\apps\0k4ci1p3\default\
MSI (s) (54:B4) [16:04:26:592]: Dir (source): Key: dir302A0E4D0E8A28D4161D5640B55896DC , Object: D:\Install\ , LongSubPath: SplunkUniversalForwarder\etc\apps\search\ , ShortSubPath: w89duo8g\etc\apps\search\
MSI (s) (54:B4) [16:04:26:592]: Dir (source): Key: dir66FC566CEF189328CCCC8589311D2503 , Object: D:\Install\ , LongSubPath: SplunkUniversalForwarder\etc\apps\search\metadata\ , ShortSubPath: w89duo8g\etc\apps\search\metadata\
MSI (s) (54:B4) [16:04:26:592]: Dir (source): Key: dir05B2167CF0ED7EFD2AD93158875F568C , Object: D:\Install\ , LongSubPath: SplunkUniversalForwarder\etc\apps\search\lookups\ , ShortSubPath: w89duo8g\etc\apps\search\lookups\
MSI (s) (54:B4) [16:04:26:592]: Dir (source): Key: dir0ABBB45398994B5C89841ED05851776C , Object: D:\Install\ , LongSubPath: SplunkUniversalForwarder\etc\apps\search\default\ , ShortSubPath: w89duo8g\etc\apps\search\default\
MSI (s) (54:B4) [16:04:26:592]: Dir (source): Key: dir1ACCD951EA5C77FB92B36E8AB9382509 , Object: D:\Install\ , LongSubPath: SplunkUniversalForwarder\etc\apps\learned\ , ShortSubPath: w89duo8g\etc\apps\learned\
MSI (s) (54:B4) [16:04:26:592]: Dir (source): Key: dir28F70AA0D15CA730061DB84FFE88D805 , Object: D:\Install\ , LongSubPath: SplunkUniversalForwarder\etc\apps\learned\metadata\ , ShortSubPath: w89duo8g\etc\apps\learned\metadata\
MSI (s) (54:B4) [16:04:26:592]: Dir (source): Key: dir7C2F815EE2C9E7DBE85066CF5B056987 , Object: D:\Install\ , LongSubPath: SplunkUniversalForwarder\etc\apps\learned\default\ , ShortSubPath: w89duo8g\etc\apps\learned\default\
MSI (s) (54:B4) [16:04:26:592]: Dir (source): Key: dirFB744D04EDFDCD8AF58A1449ABBAD45F , Object: D:\Install\ , LongSubPath: SplunkUniversalForwarder\etc\apps\introspection_generator_addon\ , ShortSubPath: w89duo8g\etc\apps\5ei81amz\
MSI (s) (54:B4) [16:04:26:592]: Dir (source): Key: dirA4925C017BDFD103F37D0BDE702E9C43 , Object: D:\Install\ , LongSubPath: SplunkUniversalForwarder\etc\apps\introspection_generator_addon\default\ , ShortSubPath: w89duo8g\etc\apps\5ei81amz\default\
MSI (s) (54:B4) [16:04:26:592]: Dir (source): Key: dirFB7FAFCA28F7419DE35973B35C5D283E , Object: D:\Install\ , LongSubPath: SplunkUniversalForwarder\etc\apps\introspection_generator_addon\bin\ , ShortSubPath: w89duo8g\etc\apps\5ei81amz\bin\
MSI (s) (54:B4) [16:04:26:592]: Dir (source): Key: dirA5528701EE26FFBF346CCE20EE8ACE99 , Object: D:\Install\ , LongSubPath: SplunkUniversalForwarder\bin\ , ShortSubPath: w89duo8g\bin\
MSI (s) (54:B4) [16:04:26:592]: Dir (source): Key: dirE99B67BA83CA9B283DA87308D2AB32C0 , Object: D:\Install\ , LongSubPath: SplunkUniversalForwarder\bin\scripts\ , ShortSubPath: w89duo8g\bin\scripts\
MSI (s) (54:B4) [16:04:26:592]: Note: 1: 2205 2: 3: ActionText
MSI (s) (54:B4) [16:04:26:592]: Note: 1: 2205 2: 3: ActionText
MSI (s) (54:B4) [16:04:26:592]: Note: 1: 2205 2: 3: ActionText
Action 16:04:26: GenerateScript. Generating script operations for action:
GenerateScript: Updating component registration
Action ended 16:04:26: ProcessComponents. Return value 1.
MSI (s) (54:B4) [16:04:26:623]: Doing action: UnpublishFeatures
MSI (s) (54:B4) [16:04:26:623]: Note: 1: 2205 2: 3: ActionText
Action 16:04:26: UnpublishFeatures. Unpublishing Product Features
Action start 16:04:26: UnpublishFeatures.
Action ended 16:04:26: UnpublishFeatures. Return value 1.
MSI (s) (54:B4) [16:04:26:623]: Skipping action: StopSplunkServiceDefData (condition is false)
MSI (s) (54:B4) [16:04:26:623]: Skipping action: StopSplunkServiceDef (condition is false)
MSI (s) (54:B4) [16:04:26:623]: Skipping action: RemoveAccountFromGroupsData (condition is false)
MSI (s) (54:B4) [16:04:26:623]: Skipping action: RemoveAccountFromGroups (condition is false)
MSI (s) (54:B4) [16:04:26:623]: Skipping action: RemoveRightsFromRegistryData (condition is false)
MSI (s) (54:B4) [16:04:26:623]: Skipping action: RemoveRightsFromRegistry (condition is false)
MSI (s) (54:B4) [16:04:26:623]: Skipping action: RemoveGroupAndRightsFromRegData (condition is false)
MSI (s) (54:B4) [16:04:26:623]: Skipping action: RemoveGroupAndRightsFromReg (condition is false)
MSI (s) (54:B4) [16:04:26:623]: Skipping action: UninstallSplunkServiceData (condition is false)
MSI (s) (54:B4) [16:04:26:623]: Skipping action: UninstallSplunkService (condition is false)
MSI (s) (54:B4) [16:04:26:623]: Skipping action: UninstallRegmonDrvData (condition is false)
MSI (s) (54:B4) [16:04:26:623]: Skipping action: UninstallRegmonDrv (condition is false)
MSI (s) (54:B4) [16:04:26:623]: Skipping action: UninstallNetmonDrvData (condition is false)
MSI (s) (54:B4) [16:04:26:623]: Skipping action: UninstallNetmonDrv (condition is false)
MSI (s) (54:B4) [16:04:26:623]: Skipping action: UninstallNohandleDrvData (condition is false)
MSI (s) (54:B4) [16:04:26:623]: Skipping action: UninstallNohandleDrv (condition is false)
MSI (s) (54:B4) [16:04:26:623]: Doing action: RemoveFiles
MSI (s) (54:B4) [16:04:26:623]: Note: 1: 2205 2: 3: ActionText
Action 16:04:26: RemoveFiles. Removing files
Action start 16:04:26: RemoveFiles.
MSI (s) (54:B4) [16:04:26:623]: Note: 1: 2205 2: 3: RemoveFile
MSI (s) (54:B4) [16:04:26:623]: Note: 1: 2205 2: 3: RemoveFile
Action ended 16:04:26: RemoveFiles. Return value 0.
MSI (s) (54:B4) [16:04:26:623]: Skipping action: RemoveSplunkHomeData (condition is false)
MSI (s) (54:B4) [16:04:26:623]: Skipping action: RemoveSplunkHome (condition is false)
MSI (s) (54:B4) [16:04:26:623]: Doing action: InstallFiles
MSI (s) (54:B4) [16:04:26:623]: Note: 1: 2205 2: 3: ActionText
Action 16:04:26: InstallFiles. Copying new files
Action start 16:04:26: InstallFiles.
MSI (s) (54:B4) [16:04:26:623]: The file represented by File table key 'fil96B113E88E31A386264BA92B7F6B12EF' has no eligible binary patches
MSI (s) (54:B4) [16:04:26:623]: The file represented by File table key 'fil8E867683EEE07795ADE9CADFD260F76F' has no eligible binary patches
MSI (s) (54:B4) [16:04:26:623]: The file represented by File table key 'fil93C77AB986AF8BCF1C073B94A387F755' has no eligible binary patches
MSI (s) (54:B4) [16:04:26:623]: The file represented by File table key 'fil9376A758C23E2BB13C80FE6B4CA1B5DC' has no eligible binary patches
MSI (s) (54:B4) [16:04:26:623]: The file represented by File table key 'fil5310656A829E8E681CDA8D48BB3171CA' has no eligible binary patches
MSI (s) (54:B4) [16:04:26:623]: The file represented by File table key 'fil8D54D343945FDB954A6C9465DA88549F' has no eligible binary patches
MSI (s) (54:B4) [16:04:26:623]: The file represented by File table key 'filBDECFE9DFE404122482E9D611B013E86' has no eligible binary patches
MSI (s) (54:B4) [16:04:26:623]: The file represented by File table key 'fil44A3BE8CF8641E08449085CC60FE643F' has no eligible binary patches
MSI (s) (54:B4) [16:04:26:623]: The file represented by File table key 'filB997555BD2F107D5D32274D97396A1CB' has no eligible binary patches
MSI (s) (54:B4) [16:04:26:623]: The file represented by File table key 'filD3D45CBE21546CB089F1F87079CC1B64' has no eligible binary patches
MSI (s) (54:B4) [16:04:26:623]: The file represented by File table key 'fil5006D38C4CF41C30E22B57CF650CD445' has no eligible binary patches
MSI (s) (54:B4) [16:04:26:623]: The file represented by File table key 'filBC889E22EB8FFDE5558F3423C01D7EDC' has no eligible binary patches
MSI (s) (54:B4) [16:04:26:623]: The file represented by File table key 'fil366998F7A0C63242FD326244DDC744EA' has no eligible binary patches
MSI (s) (54:B4) [16:04:26:623]: The file represented by File table key 'fil65C6A0BF6E1BA41E215C10F385C20BB8' has no eligible binary patches
MSI (s) (54:B4) [16:04:26:623]: The file represented by File table key 'fil64689A9A74111D128DA996C02A8FE45F' has no eligible binary patches
MSI (s) (54:B4) [16:04:26:623]: The file represented by File table key 'fil02E0233267C642151062CED0A5254DF0' has no eligible binary patches
MSI (s) (54:B4) [16:04:26:623]: The file represented by File table key 'filF52C889D89C9C48B58CB82000E42309F' has no eligible binary patches
MSI (s) (54:B4) [16:04:26:623]: The file represented by File table key 'fil1A967A18D186B002E338F67AC612D25B' has no eligible binary patches
MSI (s) (54:B4) [16:04:26:623]: The file represented by File table key 'fil2723C0264539330A588D9440656B8E92' has no eligible binary patches
MSI (s) (54:B4) [16:04:26:623]: The file represented by File table key 'filAEBDF98396B5B028F09A0BA7F067791B' has no eligible binary patches
MSI (s) (54:B4) [16:04:26:623]: The file represented by File table key 'fil89AA30BB7AC8542D777736B2C689A25B' has no eligible binary patches
MSI (s) (54:B4) [16:04:26:623]: The file represented by File table key 'fil87AB6D8C000B09860E1E5DED7E4D7755' has no eligible binary patches
MSI (s) (54:B4) [16:04:26:623]: The file represented by File table key 'filA8AD42B727FB896197EE292797A1F463' has no eligible binary patches
MSI (s) (54:B4) [16:04:26:623]: The file represented by File table key 'fil55D7C2F37B1E4D5B63C3950406F110CB' has no eligible binary patches
MSI (s) (54:B4) [16:04:26:623]: The file represented by File table key 'fil4A8CE3D5C39D5E2BA9CF731C7A95E03D' has no eligible binary patches
MSI (s) (54:B4) [16:04:26:623]: The file represented by File table key 'filF97B48E5E2A6400DFCB267D68DE68664' has no eligible binary patches
MSI (s) (54:B4) [16:04:26:623]: The file represented by File table key 'filE5B765EF815A414C21CB68EC48B28F44' has no eligible binary patches
MSI (s) (54:B4) [16:04:26:623]: The file represented by File table key 'filA9D13AFECAAA1A90C8E30D2ADCD5442D' has no eligible binary patches
MSI (s) (54:B4) [16:04:26:623]: The file represented by File table key 'fil944F7C263AC1D64968B1779406FE5865' has no eligible binary patches
MSI (s) (54:B4) [16:04:26:623]: The file represented by File table key 'fil7FB0C1F4097446A596A1A3A4A9BDEEDB' has no eligible binary patches
MSI (s) (54:B4) [16:04:26:623]: The file represented by File table key 'fil0378B508F9B6EE1A009F9830F26EA35A' has no eligible binary patches
MSI (s) (54:B4) [16:04:26:623]: The file represented by File table key 'fil844841490B27383F5BD1AAA6BB54CEB6' has no eligible binary patches
MSI (s) (54:B4) [16:04:26:623]: The file represented by File table key 'fil93B202166A8D34A66D6EB7EBDC848097' has no eligible binary patches
MSI (s) (54:B4) [16:04:26:623]: The file represented by File table key 'fil5AC0443DACF11BD6F6DFDAAB0174089F' has no eligible binary patches
MSI (s) (54:B4) [16:04:26:623]: The file represented by File table key 'fil19C8C29C7E69B307883DFAD34C83CEB8' has no eligible binary patches
MSI (s) (54:B4) [16:04:26:623]: The file represented by File table key 'filFBF34708A5241EC1A74E1286DA84CC35' has no eligible binary patches
MSI (s) (54:B4) [16:04:26:623]: The file represented by File table key 'fil11304BE3D74939887604160CC0F6DD11' has no eligible binary patches
MSI (s) (54:B4) [16:04:26:623]: The file represented by File table key 'fil655FA1EF3E8115960B9C776217D6AABA' has no eligible binary patches
MSI (s) (54:B4) [16:04:26:623]: The file represented by File table key 'fil4D07E37963F72EF81D9E93968882225E' has no eligible binary patches
MSI (s) (54:B4) [16:04:26:623]: The file represented by File table key 'fil7780CBD22DE9DA1923426EF05BBFD2B0' has no eligible binary patches
MSI (s) (54:B4) [16:04:26:623]: The file represented by File table key 'fil664EC4FB7C2356A58135B450A56F28B7' has no eligible binary patches
MSI (s) (54:B4) [16:04:26:623]: The file represented by File table key 'fil008C5C4B1FBADAB37F7AB8AA426EE2DA' has no eligible binary patches
MSI (s) (54:B4) [16:04:26:623]: The file represented by File table key 'fil9BAF1375FF5935C40F21C6E1AA65905A' has no eligible binary patches
MSI (s) (54:B4) [16:04:26:623]: The file represented by File table key 'fil20E1B8325CC241CC5C79A5E5BF2F9D72' has no eligible binary patches
MSI (s) (54:B4) [16:04:26:623]: The file represented by File table key 'filEA35489E1085B7D7CB0FE9BEE447FE38' has no eligible binary patches
MSI (s) (54:B4) [16:04:26:623]: The file represented by File table key 'fil73F0F3AD642EB6F037DF77AA728C972A' has no eligible binary patches
MSI (s) (54:B4) [16:04:26:623]: The file represented by File table key 'fil56AB974A07C8AC559B21B8401F6E07F1' has no eligible binary patches
MSI (s) (54:B4) [16:04:26:623]: The file represented by File table key 'fil37861F6DEED8144CED590D8CE2E5822B' has no eligible binary patches
MSI (s) (54:B4) [16:04:26:623]: The file represented by File table key 'fil5F2BF49118EBFDD358AEF53FA5FC3108' has no eligible binary patches
MSI (s) (54:B4) [16:04:26:623]: The file represented by File table key 'filA58A592B836124C3D6FDF79E132A7692' has no eligible binary patches
MSI (s) (54:B4) [16:04:26:623]: The file represented by File table key 'fil4C1ED641BF28FA2A61DD7B693032DE6F' has no eligible binary patches
MSI (s) (54:B4) [16:04:26:623]: The file represented by File table key 'fil0CF839043F9618C53CEE04DD6FC57691' has no eligible binary patches
MSI (s) (54:B4) [16:04:26:623]: The file represented by File table key 'fil6ECE45D688742752D00A1D929DB75564' has no eligible binary patches
MSI (s) (54:B4) [16:04:26:623]: The file represented by File table key 'fil5D91D555032A73AFEDBE8938A56F56BF' has no eligible binary patches
MSI (s) (54:B4) [16:04:26:623]: The file represented by File table key 'filF4ACFE00FE54A2C3543A0068A211DC1B' has no eligible binary patches
MSI (s) (54:B4) [16:04:26:623]: The file represented by File table key 'fil0748A0E38378D7C2E9972FD4FDFBB05C' has no eligible binary patches
MSI (s) (54:B4) [16:04:26:639]: The file represented by File table key 'filA9094CE4D7D5A857B7810D6C73C3FBFD' has no eligible binary patches
MSI (s) (54:B4) [16:04:26:639]: The file represented by File table key 'fil6297AF418BE81035D75C06B343A7F5F2' has no eligible binary patches
MSI (s) (54:B4) [16:04:26:639]: The file represented by File table key 'fil3AD35433DE15DD536AA83F4C0403D2A2' has no eligible binary patches
MSI (s) (54:B4) [16:04:26:639]: The file represented by File table key 'filFE6A0771DA2B61AD8223323945E3626D' has no eligible binary patches
MSI (s) (54:B4) [16:04:26:639]: The file represented by File table key 'filEF5BDE4818C7F2BC2B38FC284B1AC16E' has no eligible binary patches
MSI (s) (54:B4) [16:04:26:639]: The file represented by File table key 'fil63D45CDA175E0D40CEC55705F1E732FD' has no eligible binary patches
MSI (s) (54:B4) [16:04:26:639]: The file represented by File table key 'fil610552BBC767BCA2A5220D523F64B101' has no eligible binary patches
MSI (s) (54:B4) [16:04:26:639]: The file represented by File table key 'fil5CB5E79D406B095C6C3C84B9C5B62B3E' has no eligible binary patches
MSI (s) (54:B4) [16:04:26:639]: The file represented by File table key 'fil8D9F7FA02E8FDCF331B93C44862E82E2' has no eligible binary patches
MSI (s) (54:B4) [16:04:26:639]: The file represented by File table key 'fil7F23E06AC0B91DEB08A6BD38DB4E7E0E' has no eligible binary patches
MSI (s) (54:B4) [16:04:26:639]: The file represented by File table key 'fil9578CE851CF08845DA1E0053D622E4E0' has no eligible binary patches
MSI (s) (54:B4) [16:04:26:639]: The file represented by File table key 'filD97C53DE6B834A4939F31E1CAC01EDD4' has no eligible binary patches
MSI (s) (54:B4) [16:04:26:639]: The file represented by File table key 'fil0CD888D65A36713C75D84323A5EBE74F' has no eligible binary patches
MSI (s) (54:B4) [16:04:26:639]: The file represented by File table key 'fil53A96EF6A1674605CCCEE6D85EC29D9F' has no eligible binary patches
MSI (s) (54:B4) [16:04:26:639]: The file represented by File table key 'fil721273CDDA8EA5EFB020C4BF508F538A' has no eligible binary patches
MSI (s) (54:B4) [16:04:26:639]: The file represented by File table key 'filD14D3D477DF0E3D49F21A3A4E18F410B' has no eligible binary patches
MSI (s) (54:B4) [16:04:26:639]: The file represented by File table key 'fil5884957E3E3CB363455D8AC79A5274CC' has no eligible binary patches
MSI (s) (54:B4) [16:04:26:639]: The file represented by File table key 'fil032EE721C3538F42D15D8C3B2742A80A' has no eligible binary patches
MSI (s) (54:B4) [16:04:26:639]: The file represented by File table key 'fil56695E0AD47C11C58E66D19975134414' has no eligible binary patches
MSI (s) (54:B4) [16:04:26:639]: The file represented by File table key 'fil44976CAE08AF2DACB4F1C92B7AED10BC' has no eligible binary patches
MSI (s) (54:B4) [16:04:26:639]: The file represented by File table key 'filF44485FA794E8FB8EF67455D9A60AA46' has no eligible binary patches
MSI (s) (54:B4) [16:04:26:639]: The file represented by File table key 'fil466EC195DC61904AEEA9A89434AADB72' has no eligible binary patches
MSI (s) (54:B4) [16:04:26:639]: The file represented by File table key 'fil0ED0AE0D5B2285D12CBAF87095D62D61' has no eligible binary patches
MSI (s) (54:B4) [16:04:26:639]: The file represented by File table key 'filE550630C59BE49F0D46A6129D15980A9' has no eligible binary patches
MSI (s) (54:B4) [16:04:26:639]: The file represented by File table key 'fil4A30FCCE51746EBE3142D05B9869707E' has no eligible binary patches
MSI (s) (54:B4) [16:04:26:639]: The file represented by File table key 'fil4E2BAD67176624B56FA8FD3FA7EDFF12' has no eligible binary patches
MSI (s) (54:B4) [16:04:26:639]: The file represented by File table key 'filCBA61C20CE05C5DC8EF0ED83C43254DF' has no eligible binary patches
MSI (s) (54:B4) [16:04:26:639]: The file represented by File table key 'filF9432BD9CC4347790758EF6BF7936A4B' has no eligible binary patches
MSI (s) (54:B4) [16:04:26:639]: The file represented by File table key 'fil1F8E02989714854A3057ACB50933780F' has no eligible binary patches
MSI (s) (54:B4) [16:04:26:639]: The file represented by File table key 'filD619FFAFB6B1C8F7BA3D26FB28FB1768' has no eligible binary patches
MSI (s) (54:B4) [16:04:26:639]: The file represented by File table key 'fil52AB5FA48DD0B6BE93B3A54067039578' has no eligible binary patches
MSI (s) (54:B4) [16:04:26:639]: The file represented by File table key 'filE0D326240FED5E2E1E015D4D5D9B178F' has no eligible binary patches
MSI (s) (54:B4) [16:04:26:639]: The file represented by File table key 'fil71A9C98E1F38D07926B319D33B71B400' has no eligible binary patches
MSI (s) (54:B4) [16:04:26:639]: The file represented by File table key 'filBC97CBFC347E358F3BEB72D9CB1474C2' has no eligible binary patches
MSI (s) (54:B4) [16:04:26:639]: The file represented by File table key 'fil9429DE1677F7E3426508F2BB2F4A21E6' has no eligible binary patches
MSI (s) (54:B4) [16:04:26:639]: The file represented by File table key 'filCA5F5D41767432CBBA8F56E32345A42F' has no eligible binary patches
MSI (s) (54:B4) [16:04:26:639]: The file represented by File table key 'filAE310E89DBD11CEE52933BAEE2504714' has no eligible binary patches
MSI (s) (54:B4) [16:04:26:639]: The file represented by File table key 'fil43FCBBCFA6460AAF5953FCE4E4322AE1' has no eligible binary patches
MSI (s) (54:B4) [16:04:26:639]: The file represented by File table key 'filCCD7563F13FD21F3E76E689C311B523D' has no eligible binary patches
MSI (s) (54:B4) [16:04:26:639]: The file represented by File table key 'filB3E1F7A649ECA6B931CB58734FAABEFF' has no eligible binary patches
MSI (s) (54:B4) [16:04:26:639]: The file represented by File table key 'fil927CDA155EF7735F5ED2FE8AA03F569A' has no eligible binary patches
MSI (s) (54:B4) [16:04:26:639]: The file represented by File table key 'fil0741C5417EF4936E21491AA1B9327F73' has no eligible binary patches
MSI (s) (54:B4) [16:04:26:639]: The file represented by File table key 'fil59C088F5BE74CA2DD5D5A6A06C28D746' has no eligible binary patches
MSI (s) (54:B4) [16:04:26:639]: The file represented by File table key 'filC80F9C9DD39359DEDBBE805DD7A362E4' has no eligible binary patches
MSI (s) (54:B4) [16:04:26:639]: The file represented by File table key 'filA91ABA156411F6A5FE3AA0EE9124E7D5' has no eligible binary patches
MSI (s) (54:B4) [16:04:26:639]: The file represented by File table key 'filB9173BDA84EF0A89331114F43A79BE99' has no eligible binary patches
MSI (s) (54:B4) [16:04:26:639]: The file represented by File table key 'filFFD0A48B92D564AD2586EEDC3AF570B4' has no eligible binary patches
MSI (s) (54:B4) [16:04:26:639]: The file represented by File table key 'filD489E311E028C203064AB15DF965E738' has no eligible binary patches
MSI (s) (54:B4) [16:04:26:639]: The file represented by File table key 'fil06949EF52111D99C9F3569A5D6FDA2E2' has no eligible binary patches
MSI (s) (54:B4) [16:04:26:639]: The file represented by File table key 'fil899A3448B283B41D367BA3A410E5DD5B' has no eligible binary patches
MSI (s) (54:B4) [16:04:26:639]: The file represented by File table key 'fil9D059B7F77F7EBD964143307948104B0' has no eligible binary patches
MSI (s) (54:B4) [16:04:26:639]: The file represented by File table key 'filB87AB719CCB4170C4487DE3DE32D8A2B' has no eligible binary patches
MSI (s) (54:B4) [16:04:26:639]: The file represented by File table key 'fil8426DEA3E955D272F007EB08F719639B' has no eligible binary patches
MSI (s) (54:B4) [16:04:26:639]: The file represented by File table key 'fil8FB766132BE092C1597A2328EEEC9750' has no eligible binary patches
MSI (s) (54:B4) [16:04:26:639]: The file represented by File table key 'filE158C964C2D08AE6008CEC934ED27F3C' has no eligible binary patches
MSI (s) (54:B4) [16:04:26:639]: The file represented by File table key 'fil2A22614B2E6FB8F5630D431337A132B0' has no eligible binary patches
MSI (s) (54:B4) [16:04:26:639]: The file represented by File table key 'filCC65024C5DC80DE24FD65F438D1FED93' has no eligible binary patches
MSI (s) (54:B4) [16:04:26:639]: The file represented by File table key 'fil5462E131BE0455E42F53F3655D3B72AA' has no eligible binary patches
MSI (s) (54:B4) [16:04:26:639]: The file represented by File table key 'fil6A280352AA7257EE97E2FB3D38405A46' has no eligible binary patches
MSI (s) (54:B4) [16:04:26:639]: The file represented by File table key 'filC269D1D5A7130302DFBD3ED9375FDE87' has no eligible binary patches
MSI (s) (54:B4) [16:04:26:639]: The file represented by File table key 'fil16BE0931A9744D5C566346C5478B1445' has no eligible binary patches
MSI (s) (54:B4) [16:04:26:639]: The file represented by File table key 'filD9DFDBC2FA9CCABCCC2C7DE8D03CE5B9' has no eligible binary patches
MSI (s) (54:B4) [16:04:26:639]: The file represented by File table key 'filA9B15B4E60F8A498089FD81F1D3CA203' has no eligible binary patches
MSI (s) (54:B4) [16:04:26:639]: The file represented by File table key 'filAB0A37E7E5F933E4E43D8F7710A090D9' has no eligible binary patches
MSI (s) (54:B4) [16:04:26:639]: The file represented by File table key 'filFE70A95131D4D08233615C3620D8FAA5' has no eligible binary patches
MSI (s) (54:B4) [16:04:26:639]: The file represented by File table key 'filEE9472504B5E20D53BE708464E9AC19C' has no eligible binary patches
MSI (s) (54:B4) [16:04:26:639]: The file represented by File table key 'filA74F8674601DAD081A4301855D119001' has no eligible binary patches
MSI (s) (54:B4) [16:04:26:639]: The file represented by File table key 'fil13F2EB7BC95E1C65B80AC028F552B5A5' has no eligible binary patches
MSI (s) (54:B4) [16:04:26:639]: The file represented by File table key 'filE54EFB65BE4AC503859BABC22793B712' has no eligible binary patches
MSI (s) (54:B4) [16:04:26:639]: The file represented by File table key 'filFFC45AA09571FD1DE4BFDE4BBED99448' has no eligible binary patches
MSI (s) (54:B4) [16:04:26:639]: The file represented by File table key 'fil29379F3ADCE549F155A70770EE52E1F0' has no eligible binary patches
MSI (s) (54:B4) [16:04:26:639]: The file represented by File table key 'fil68A50A2272E509D3A0AA798E82154F54' has no eligible binary patches
MSI (s) (54:B4) [16:04:26:639]: The file represented by File table key 'filC083D8F7F7648D124EDB1EBCA3041E46' has no eligible binary patches
MSI (s) (54:B4) [16:04:26:639]: The file represented by File table key 'fil721E1308FA4515379144618EDC5BE0D1' has no eligible binary patches
MSI (s) (54:B4) [16:04:26:639]: The file represented by File table key 'fil9F81DBF0F6DED77BF6E83CF8F6AC934D' has no eligible binary patches
MSI (s) (54:B4) [16:04:26:639]: The file represented by File table key 'fil271C63FDB34AA983C01F6C6F237BFCA7' has no eligible binary patches
MSI (s) (54:B4) [16:04:26:639]: The file represented by File table key 'fil9ED4570C62823F66DA51B5B95F4AD2C5' has no eligible binary patches
MSI (s) (54:B4) [16:04:26:639]: The file represented by File table key 'fil32542C8806A71DC2B05BF479254E0DC3' has no eligible binary patches
MSI (s) (54:B4) [16:04:26:639]: The file represented by File table key 'filEBFF6A2E88205B42731B1F512E265459' has no eligible binary patches
MSI (s) (54:B4) [16:04:26:639]: The file represented by File table key 'filD043569E0625C8D8D00839775A0DC4BA' has no eligible binary patches
MSI (s) (54:B4) [16:04:26:639]: The file represented by File table key 'fil90FC8766281688DC3C91F72FD852418B' has no eligible binary patches
MSI (s) (54:B4) [16:04:26:639]: The file represented by File table key 'fil8D818120B2094F3B4F38A803672F614A' has no eligible binary patches
MSI (s) (54:B4) [16:04:26:639]: The file represented by File table key 'fil0F27C27631E6A3F52619A428F6463F53' has no eligible binary patches
MSI (s) (54:B4) [16:04:26:639]: The file represented by File table key 'fil9E4E3CB2B4182EB1C198C9B01A536A0C' has no eligible binary patches
MSI (s) (54:B4) [16:04:26:639]: The file represented by File table key 'fil6D851D169D614E39F6E9C37109CA1D44' has no eligible binary patches
MSI (s) (54:B4) [16:04:26:639]: The file represented by File table key 'filDE5F6124A3D27D55FFF17514A3133298' has no eligible binary patches
MSI (s) (54:B4) [16:04:26:639]: The file represented by File table key 'filCC1F36045B42424D7641303C5B06642D' has no eligible binary patches
MSI (s) (54:B4) [16:04:26:639]: The file represented by File table key 'fil8A5EC3DC54B9673F1908EAF16ECF75B2' has no eligible binary patches
MSI (s) (54:B4) [16:04:26:639]: The file represented by File table key 'fil97B84F5B390C007A8F40384DE510112B' has no eligible binary patches
MSI (s) (54:B4) [16:04:26:639]: The file represented by File table key 'fil5BA2628FF9032DDFEF9E1021420F4C51' has no eligible binary patches
MSI (s) (54:B4) [16:04:26:639]: The file represented by File table key 'filAF59BDCE776E3B789E61BCF2F68FEBBD' has no eligible binary patches
MSI (s) (54:B4) [16:04:26:639]: The file represented by File table key 'fil982C245194D5F3BCA3F9760D8B29A6A7' has no eligible binary patches
MSI (s) (54:B4) [16:04:26:639]: The file represented by File table key 'fil4F10D3485D0CF23408D456E044B24BF5' has no eligible binary patches
MSI (s) (54:B4) [16:04:26:639]: The file represented by File table key 'fil5727116202953C8077AC3779B94B237A' has no eligible binary patches
MSI (s) (54:B4) [16:04:26:639]: The file represented by File table key 'fil8333B7C1AE70E87455B542B85017A4C9' has no eligible binary patches
MSI (s) (54:B4) [16:04:26:639]: The file represented by File table key 'fil264734AD43DC36937C8A94AC559A1335' has no eligible binary patches
MSI (s) (54:B4) [16:04:26:639]: The file represented by File table key 'fil33D369103C8850E57FB4E5C73DE14EA6' has no eligible binary patches
MSI (s) (54:B4) [16:04:26:639]: The file represented by File table key 'fil2293C306D9D8BFAF03102379D3B62DA4' has no eligible binary patches
MSI (s) (54:B4) [16:04:26:639]: The file represented by File table key 'fil4B560A713D675FE073EA41BA1F82D187' has no eligible binary patches
MSI (s) (54:B4) [16:04:26:639]: The file represented by File table key 'filFD51B4C3835A24C6B8CAC889984405E0' has no eligible binary patches
MSI (s) (54:B4) [16:04:26:639]: The file represented by File table key 'filB33E8D029CF561838D33E1A55B0133E0' has no eligible binary patches
MSI (s) (54:B4) [16:04:26:639]: The file represented by File table key 'filF6B10CC7315ECD01E870EB7E0329F765' has no eligible binary patches
MSI (s) (54:B4) [16:04:26:639]: The file represented by File table key 'filD4D56383824F00E6351FCDC89BE8BF9A' has no eligible binary patches
MSI (s) (54:B4) [16:04:26:639]: The file represented by File table key 'filF870272E534F7B53F3A5A848BE86AAE2' has no eligible binary patches
MSI (s) (54:B4) [16:04:26:639]: The file represented by File table key 'filE7144236650EDCFA2FC9F485AC4E5BF8' has no eligible binary patches
MSI (s) (54:B4) [16:04:26:639]: The file represented by File table key 'fil3FE7115EC3AE211F823F2972087F8179' has no eligible binary patches
MSI (s) (54:B4) [16:04:26:639]: The file represented by File table key 'fil92F27DDF9C69985515585E96D2FBD68F' has no eligible binary patches
MSI (s) (54:B4) [16:04:26:639]: The file represented by File table key 'filA4B49DD9ADB467348B04F931358829E8' has no eligible binary patches
MSI (s) (54:B4) [16:04:26:639]: The file represented by File table key 'fil2EB2D93A84610D6DBF369B1C5EBA3D17' has no eligible binary patches
MSI (s) (54:B4) [16:04:26:639]: The file represented by File table key 'fil13E76F62F5ABD79629E8EA5252CFCFFD' has no eligible binary patches
MSI (s) (54:B4) [16:04:26:639]: The file represented by File table key 'fil1D2D282FF3104EF53812DB2CCADA99AC' has no eligible binary patches
MSI (s) (54:B4) [16:04:26:639]: The file represented by File table key 'fil22BAD424E9CF650ED1C306E097600EF0' has no eligible binary patches
MSI (s) (54:B4) [16:04:26:639]: The file represented by File table key 'fil6A95F59DD886AFA96BDC42B549CCB72B' has no eligible binary patches
MSI (s) (54:B4) [16:04:26:639]: The file represented by File table key 'fil725395DFB158C935B9753745782FC031' has no eligible binary patches
MSI (s) (54:B4) [16:04:26:639]: The file represented by File table key 'filCCAEAA94E758EEA0A20BBC166F5B250B' has no eligible binary patches
MSI (s) (54:B4) [16:04:26:639]: The file represented by File table key 'fil8644E441B78A6EEFE67F890162B9163F' has no eligible binary patches
MSI (s) (54:B4) [16:04:26:639]: The file represented by File table key 'fil4630B0AEABDF45CCB14D5270D5F4D260' has no eligible binary patches
MSI (s) (54:B4) [16:04:26:639]: The file represented by File table key 'fil5EBC7795E658D5E4619CAF92D6940798' has no eligible binary patches
MSI (s) (54:B4) [16:04:26:639]: The file represented by File table key 'fil404C9FC8BE0DFB6F4C9B91FB3A312906' has no eligible binary patches
MSI (s) (54:B4) [16:04:26:639]: The file represented by File table key 'filBC2816778BEE9861CAD8F3E539E72290' has no eligible binary patches
MSI (s) (54:B4) [16:04:26:639]: The file represented by File table key 'filA7432AD6AF3DA2330B859C944DB5E198' has no eligible binary patches
MSI (s) (54:B4) [16:04:26:639]: The file represented by File table key 'fil9F4F40308F0D9965AFECEC362E27B27D' has no eligible binary patches
MSI (s) (54:B4) [16:04:26:639]: The file represented by File table key 'fil2A04F9D7AD1F3B2646AED56EAE0F5949' has no eligible binary patches
MSI (s) (54:B4) [16:04:26:639]: The file represented by File table key 'fil9127E0DD95006110BEF6AD7B2D72B331' has no eligible binary patches
MSI (s) (54:B4) [16:04:26:639]: The file represented by File table key 'filCAD53445CD026138ABA137073C5BFA5A' has no eligible binary patches
MSI (s) (54:B4) [16:04:26:639]: The file represented by File table key 'fil71F90DC8AF815CC0F5EC83884DFF6CD0' has no eligible binary patches
MSI (s) (54:B4) [16:04:26:639]: The file represented by File table key 'filA6F3274B8D862BA5BFF466C71A9B814A' has no eligible binary patches
MSI (s) (54:B4) [16:04:26:639]: The file represented by File table key 'fil7DE657C3850B8FACFA7FDC1D2637E78B' has no eligible binary patches
MSI (s) (54:B4) [16:04:26:639]: The file represented by File table key 'filFA65D2879F5FAC343FA589A0139E7BE7' has no eligible binary patches
MSI (s) (54:B4) [16:04:26:639]: The file represented by File table key 'fil1D7539E18B97867C88DFFE021DFA0F56' has no eligible binary patches
MSI (s) (54:B4) [16:04:26:639]: The file represented by File table key 'fil37D819D308A2678F1E4AA8850D622921' has no eligible binary patches
MSI (s) (54:B4) [16:04:26:639]: The file represented by File table key 'fil9536F0304133363EBC45A56F6AA710D9' has no eligible binary patches
MSI (s) (54:B4) [16:04:26:639]: The file represented by File table key 'filB55EBC7AEC708A82CAC1FC01EB3CA008' has no eligible binary patches
MSI (s) (54:B4) [16:04:26:639]: The file represented by File table key 'fil7FFE53DE47BA1CB552377DBCDB52D132' has no eligible binary patches
MSI (s) (54:B4) [16:04:26:639]: The file represented by File table key 'fil5165C7E609ABA9D25E73DD9015665047' has no eligible binary patches
MSI (s) (54:B4) [16:04:26:639]: The file represented by File table key 'filE2FBEDA27E54BE02B13139657FBA090C' has no eligible binary patches
MSI (s) (54:B4) [16:04:26:639]: The file represented by File table key 'fil8C95D6E67234F683AF93D1E26D485A58' has no eligible binary patches
MSI (s) (54:B4) [16:04:26:639]: The file represented by File table key 'fil95B6580AF9639830C6C15612D9A56B38' has no eligible binary patches
MSI (s) (54:B4) [16:04:26:639]: The file represented by File table key 'fil8B6D89F009DEADD75007D85D0F29F045' has no eligible binary patches
MSI (s) (54:B4) [16:04:26:639]: The file represented by File table key 'fil01A0BE78B4F4F91F2C2FBC989D6D4E51' has no eligible binary patches
MSI (s) (54:B4) [16:04:26:639]: The file represented by File table key 'filA9E9D844A053B4EFC7C20895E040BED8' has no eligible binary patches
MSI (s) (54:B4) [16:04:26:639]: The file represented by File table key 'fil5A7DA85A972CF3CF8B1399849A45F243' has no eligible binary patches
MSI (s) (54:B4) [16:04:26:639]: The file represented by File table key 'fil0AA2474594CE4BE76BEA66647F68CBD1' has no eligible binary patches
MSI (s) (54:B4) [16:04:26:639]: The file represented by File table key 'fil57DFE2263928701FA583D77D20DFA724' has no eligible binary patches
MSI (s) (54:B4) [16:04:26:639]: The file represented by File table key 'fil75E0A0D6A8502D15BDACE36A10D4D4C5' has no eligible binary patches
MSI (s) (54:B4) [16:04:26:639]: The file represented by File table key 'fil22DCE04BD9460C6D8A0DF5D735EC2A23' has no eligible binary patches
MSI (s) (54:B4) [16:04:26:639]: The file represented by File table key 'filC941038698BE2074748AB3CCF4FD99CA' has no eligible binary patches
MSI (s) (54:B4) [16:04:26:639]: The file represented by File table key 'filBEE3F1B1E3E5EE1074ED8DFEE5235E4C' has no eligible binary patches
MSI (s) (54:B4) [16:04:26:639]: The file represented by File table key 'fil653549A0EC59F12B9DDF8874403F1690' has no eligible binary patches
MSI (s) (54:B4) [16:04:26:639]: The file represented by File table key 'fil8386E91ACEB19D3FA5928DCA9401DE2A' has no eligible binary patches
MSI (s) (54:B4) [16:04:26:639]: The file represented by File table key 'fil6E2D14BD4493EBFE086FCC5C47EC823E' has no eligible binary patches
MSI (s) (54:B4) [16:04:26:639]: The file represented by File table key 'fil96905E32170414DCAB4D25F4F891DBB6' has no eligible binary patches
MSI (s) (54:B4) [16:04:26:639]: The file represented by File table key 'filB6B8DE3EDD58E95F1AEAE01976FB54E4' has no eligible binary patches
MSI (s) (54:B4) [16:04:26:639]: The file represented by File table key 'fil7BE38CB8FA27C33D71ABFB6C2D1466BE' has no eligible binary patches
InstallFiles: File: Copying new files, Directory: , Size:
MSI (s) (54:B4) [16:04:26:639]: Note: 1: 2205 2: 3: Patch
MSI (s) (54:B4) [16:04:26:639]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`File_`, `Patch`.`Header`, `Patch`.`Attributes`, `Patch`.`Sequence`, `Patch`.`StreamRef_` FROM `Patch` WHERE `Patch`.`File_` = ? AND `Patch`.`#_MsiActive`=? ORDER BY `Patch`.`Sequence`
MSI (s) (54:B4) [16:04:26:639]: Note: 1: 2205 2: 3: Error
MSI (s) (54:B4) [16:04:26:639]: Note: 1: 2228 2: 3: Error 4: SELECT `Message` FROM `Error` WHERE `Error` = 1302
MSI (s) (54:B4) [16:04:26:639]: Note: 1: 2205 2: 3: MsiSFCBypass
MSI (s) (54:B4) [16:04:26:639]: Note: 1: 2228 2: 3: MsiSFCBypass 4: SELECT `File_` FROM `MsiSFCBypass` WHERE `File_` = ?
MSI (s) (54:B4) [16:04:26:639]: Note: 1: 2205 2: 3: MsiPatchHeaders
MSI (s) (54:B4) [16:04:26:639]: Note: 1: 2228 2: 3: MsiPatchHeaders 4: SELECT `Header` FROM `MsiPatchHeaders` WHERE `StreamRef` = ?
MSI (s) (54:B4) [16:04:26:639]: Note: 1: 2205 2: 3: PatchPackage
MSI (s) (54:B4) [16:04:26:639]: Note: 1: 2205 2: 3: MsiPatchHeaders
MSI (s) (54:B4) [16:04:26:639]: Note: 1: 2205 2: 3: PatchPackage
Action ended 16:04:26: InstallFiles. Return value 1.
MSI (s) (54:B4) [16:04:26:717]: Doing action: RollbackRegmonDrvData
MSI (s) (54:B4) [16:04:26:717]: Note: 1: 2205 2: 3: ActionText
Action 16:04:26: RollbackRegmonDrvData.
Action start 16:04:26: RollbackRegmonDrvData.
MSI (s) (54:B4) [16:04:26:717]: PROPERTY CHANGE: Adding RollbackRegmonDrv property. Its value is 'SplunkHome=C:\Program Files\SplunkUniversalForwarder\;FailCA='.
Action ended 16:04:26: RollbackRegmonDrvData. Return value 1.
MSI (s) (54:B4) [16:04:26:717]: Doing action: RollbackRegmonDrv
MSI (s) (54:B4) [16:04:26:717]: Note: 1: 2205 2: 3: ActionText
Action 16:04:26: RollbackRegmonDrv.
Action start 16:04:26: RollbackRegmonDrv.
RollbackRegmonDrv:
Action ended 16:04:26: RollbackRegmonDrv. Return value 1.
MSI (s) (54:B4) [16:04:26:717]: Doing action: InstallRegmonDrvData
MSI (s) (54:B4) [16:04:26:717]: Note: 1: 2205 2: 3: ActionText
Action 16:04:26: InstallRegmonDrvData.
Action start 16:04:26: InstallRegmonDrvData.
MSI (s) (54:B4) [16:04:26:717]: PROPERTY CHANGE: Adding InstallRegmonDrv property. Its value is 'SplunkHome=C:\Program Files\SplunkUniversalForwarder\;LEGACYDRV=1;FailCA='.
Action ended 16:04:26: InstallRegmonDrvData. Return value 1.
MSI (s) (54:B4) [16:04:26:717]: Doing action: InstallRegmonDrv
MSI (s) (54:B4) [16:04:26:717]: Note: 1: 2205 2: 3: ActionText
Action 16:04:26: InstallRegmonDrv.
Action start 16:04:26: InstallRegmonDrv.
InstallRegmonDrv:
Action ended 16:04:26: InstallRegmonDrv. Return value 1.
MSI (s) (54:B4) [16:04:26:733]: Doing action: RollbackNetmonDrvData
MSI (s) (54:B4) [16:04:26:733]: Note: 1: 2205 2: 3: ActionText
Action 16:04:26: RollbackNetmonDrvData.
Action start 16:04:26: RollbackNetmonDrvData.
MSI (s) (54:B4) [16:04:26:733]: PROPERTY CHANGE: Adding RollbackNetmonDrv property. Its value is 'SplunkHome=C:\Program Files\SplunkUniversalForwarder\;FailCA='.
Action ended 16:04:26: RollbackNetmonDrvData. Return value 1.
MSI (s) (54:B4) [16:04:26:733]: Doing action: RollbackNetmonDrv
MSI (s) (54:B4) [16:04:26:733]: Note: 1: 2205 2: 3: ActionText
Action 16:04:26: RollbackNetmonDrv.
Action start 16:04:26: RollbackNetmonDrv.
RollbackNetmonDrv:
Action ended 16:04:26: RollbackNetmonDrv. Return value 1.
MSI (s) (54:B4) [16:04:26:733]: Doing action: InstallNetmonDrvData
MSI (s) (54:B4) [16:04:26:733]: Note: 1: 2205 2: 3: ActionText
Action 16:04:26: InstallNetmonDrvData.
Action start 16:04:26: InstallNetmonDrvData.
MSI (s) (54:B4) [16:04:26:733]: PROPERTY CHANGE: Adding InstallNetmonDrv property. Its value is 'SplunkHome=C:\Program Files\SplunkUniversalForwarder\;LEGACYDRV=1;FailCA='.
Action ended 16:04:26: InstallNetmonDrvData. Return value 1.
MSI (s) (54:B4) [16:04:26:733]: Doing action: InstallNetmonDrv
MSI (s) (54:B4) [16:04:26:733]: Note: 1: 2205 2: 3: ActionText
Action 16:04:26: InstallNetmonDrv.
Action start 16:04:26: InstallNetmonDrv.
InstallNetmonDrv:
Action ended 16:04:26: InstallNetmonDrv. Return value 1.
MSI (s) (54:B4) [16:04:26:748]: Doing action: RollbackNohandleDrvData
MSI (s) (54:B4) [16:04:26:748]: Note: 1: 2205 2: 3: ActionText
Action 16:04:26: RollbackNohandleDrvData.
Action start 16:04:26: RollbackNohandleDrvData.
MSI (s) (54:B4) [16:04:26:748]: PROPERTY CHANGE: Adding RollbackNohandleDrv property. Its value is 'SplunkHome=C:\Program Files\SplunkUniversalForwarder\;FailCA='.
Action ended 16:04:26: RollbackNohandleDrvData. Return value 1.
MSI (s) (54:B4) [16:04:26:748]: Doing action: RollbackNohandleDrv
MSI (s) (54:B4) [16:04:26:748]: Note: 1: 2205 2: 3: ActionText
Action 16:04:26: RollbackNohandleDrv.
Action start 16:04:26: RollbackNohandleDrv.
RollbackNohandleDrv:
Action ended 16:04:26: RollbackNohandleDrv. Return value 1.
MSI (s) (54:B4) [16:04:26:748]: Doing action: InstallNohandleDrvData
MSI (s) (54:B4) [16:04:26:748]: Note: 1: 2205 2: 3: ActionText
Action 16:04:26: InstallNohandleDrvData.
Action start 16:04:26: InstallNohandleDrvData.
MSI (s) (54:B4) [16:04:26:748]: PROPERTY CHANGE: Adding InstallNohandleDrv property. Its value is 'SplunkHome=C:\Program Files\SplunkUniversalForwarder\;LEGACYDRV=1;FailCA='.
Action ended 16:04:26: InstallNohandleDrvData. Return value 1.
MSI (s) (54:B4) [16:04:26:748]: Doing action: InstallNohandleDrv
MSI (s) (54:B4) [16:04:26:748]: Note: 1: 2205 2: 3: ActionText
Action 16:04:26: InstallNohandleDrv.
Action start 16:04:26: InstallNohandleDrv.
InstallNohandleDrv:
Action ended 16:04:26: InstallNohandleDrv. Return value 1.
MSI (s) (54:B4) [16:04:26:748]: Skipping action: CopyCertsData (condition is false)
MSI (s) (54:B4) [16:04:26:748]: Skipping action: CopyCerts (condition is false)
MSI (s) (54:B4) [16:04:26:748]: Doing action: CreateFtrData
MSI (s) (54:B4) [16:04:26:748]: Note: 1: 2205 2: 3: ActionText
Action 16:04:26: CreateFtrData.
Action start 16:04:26: CreateFtrData.
MSI (s) (54:B4) [16:04:26:764]: PROPERTY CHANGE: Adding CreateFtr property. Its value is 'SplunkHome=C:\Program Files\SplunkUniversalForwarder\;FailCA='.
Action ended 16:04:26: CreateFtrData. Return value 1.
MSI (s) (54:B4) [16:04:26:764]: Doing action: CreateFtr
MSI (s) (54:B4) [16:04:26:764]: Note: 1: 2205 2: 3: ActionText
Action 16:04:26: CreateFtr.
Action start 16:04:26: CreateFtr.
CreateFtr:
Action ended 16:04:26: CreateFtr. Return value 1.
MSI (s) (54:B4) [16:04:26:764]: Doing action: FirstTimeRunData
MSI (s) (54:B4) [16:04:26:764]: Note: 1: 2205 2: 3: ActionText
Action 16:04:26: FirstTimeRunData.
Action start 16:04:26: FirstTimeRunData.
MSI (s) (54:B4) [16:04:26:764]: PROPERTY CHANGE: Adding FirstTimeRun property. Its value is 'SplunkHome=C:\Program Files\SplunkUniversalForwarder\;FailCA='.
Action ended 16:04:26: FirstTimeRunData. Return value 1.
MSI (s) (54:B4) [16:04:26:764]: Doing action: FirstTimeRun
MSI (s) (54:B4) [16:04:26:764]: Note: 1: 2205 2: 3: ActionText
Action 16:04:26: FirstTimeRun.
Action start 16:04:26: FirstTimeRun.
FirstTimeRun:
Action ended 16:04:26: FirstTimeRun. Return value 1.
MSI (s) (54:B4) [16:04:26:764]: Doing action: SetSplunkLaunchConfData
MSI (s) (54:B4) [16:04:26:764]: Note: 1: 2205 2: 3: ActionText
Action 16:04:26: SetSplunkLaunchConfData.
Action start 16:04:26: SetSplunkLaunchConfData.
MSI (s) (54:B4) [16:04:26:764]: PROPERTY CHANGE: Adding SetSplunkLaunchConf property. Its value is 'SplunkHome=C:\Program Files\SplunkUniversalForwarder\;SplunkSvcName=SplunkForwarder;FailCA='.
Action ended 16:04:26: SetSplunkLaunchConfData. Return value 1.
MSI (s) (54:B4) [16:04:26:764]: Doing action: SetSplunkLaunchConf
MSI (s) (54:B4) [16:04:26:764]: Note: 1: 2205 2: 3: ActionText
Action 16:04:26: SetSplunkLaunchConf.
Action start 16:04:26: SetSplunkLaunchConf.
SetSplunkLaunchConf:
Action ended 16:04:26: SetSplunkLaunchConf. Return value 1.
MSI (s) (54:B4) [16:04:26:780]: Skipping action: SetSplunkPortData (condition is false)
MSI (s) (54:B4) [16:04:26:780]: Skipping action: SetSplunkPort (condition is false)
MSI (s) (54:B4) [16:04:26:780]: Doing action: RollbackSplunkServiceData
MSI (s) (54:B4) [16:04:26:780]: Note: 1: 2205 2: 3: ActionText
Action 16:04:26: RollbackSplunkServiceData.
Action start 16:04:26: RollbackSplunkServiceData.
MSI (s) (54:B4) [16:04:26:780]: PROPERTY CHANGE: Adding RollbackSplunkService property. Its value is 'SplunkHome=C:\Program Files\SplunkUniversalForwarder\;SplunkSvcName=SplunkForwarder;FailCA='.
Action ended 16:04:26: RollbackSplunkServiceData. Return value 1.
MSI (s) (54:B4) [16:04:26:780]: Doing action: RollbackSplunkService
MSI (s) (54:B4) [16:04:26:780]: Note: 1: 2205 2: 3: ActionText
Action 16:04:26: RollbackSplunkService.
Action start 16:04:26: RollbackSplunkService.
RollbackSplunkService:
Action ended 16:04:26: RollbackSplunkService. Return value 1.
MSI (s) (54:B4) [16:04:26:780]: Doing action: InstallSplunkServiceData
MSI (s) (54:B4) [16:04:26:780]: Note: 1: 2205 2: 3: ActionText
Action 16:04:26: InstallSplunkServiceData.
Action start 16:04:26: InstallSplunkServiceData.
MSI (s) (54:B4) [16:04:26:780]: PROPERTY CHANGE: Adding InstallSplunkService property. Its value is 'SplunkHome=C:\Program Files\SplunkUniversalForwarder\;SplunkSvcName=SplunkForwarder;PrevProdCode=;FailCA='.
Action ended 16:04:26: InstallSplunkServiceData. Return value 1.
MSI (s) (54:B4) [16:04:26:780]: Doing action: InstallSplunkService
MSI (s) (54:B4) [16:04:26:780]: Note: 1: 2205 2: 3: ActionText
Action 16:04:26: InstallSplunkService.
Action start 16:04:26: InstallSplunkService.
InstallSplunkService:
Action ended 16:04:26: InstallSplunkService. Return value 1.
MSI (s) (54:B4) [16:04:26:795]: Doing action: SetAclsData
MSI (s) (54:B4) [16:04:26:795]: Note: 1: 2205 2: 3: ActionText
Action 16:04:26: SetAclsData.
Action start 16:04:26: SetAclsData.
MSI (s) (54:B4) [16:04:26:795]: PROPERTY CHANGE: Adding SetAcls property. Its value is 'SplunkHome=C:\Program Files\SplunkUniversalForwarder\;FailCA='.
Action ended 16:04:26: SetAclsData. Return value 1.
MSI (s) (54:B4) [16:04:26:795]: Doing action: SetAcls
MSI (s) (54:B4) [16:04:26:795]: Note: 1: 2205 2: 3: ActionText
Action 16:04:26: SetAcls.
Action start 16:04:26: SetAcls.
SetAcls:
Action ended 16:04:26: SetAcls. Return value 1.
MSI (s) (54:B4) [16:04:26:795]: Doing action: EnableSplunkForwarderData
MSI (s) (54:B4) [16:04:26:795]: Note: 1: 2205 2: 3: ActionText
Action 16:04:26: EnableSplunkForwarderData.
Action start 16:04:26: EnableSplunkForwarderData.
MSI (s) (54:B4) [16:04:26:795]: PROPERTY CHANGE: Adding EnableSplunkForwarder property. Its value is 'SplunkHome=C:\Program Files\SplunkUniversalForwarder\;FailCA='.
Action ended 16:04:26: EnableSplunkForwarderData. Return value 1.
MSI (s) (54:B4) [16:04:26:795]: Doing action: EnableSplunkForwarder
MSI (s) (54:B4) [16:04:26:795]: Note: 1: 2205 2: 3: ActionText
Action 16:04:26: EnableSplunkForwarder.
Action start 16:04:26: EnableSplunkForwarder.
EnableSplunkForwarder:
Action ended 16:04:26: EnableSplunkForwarder. Return value 1.
MSI (s) (54:B4) [16:04:26:811]: Skipping action: InstallWindowsTAData (condition is false)
MSI (s) (54:B4) [16:04:26:811]: Skipping action: InstallWindowsTA (condition is false)
MSI (s) (54:B4) [16:04:26:811]: Doing action: AddReceivingIndexerData
MSI (s) (54:B4) [16:04:26:811]: Note: 1: 2205 2: 3: ActionText
Action 16:04:26: AddReceivingIndexerData.
Action start 16:04:26: AddReceivingIndexerData.
MSI (s) (54:B4) [16:04:26:811]: PROPERTY CHANGE: Adding AddReceivingIndexer property. Its value is 'SplunkHome=C:\Program Files\SplunkUniversalForwarder\;ReceivingIndexer=172.16.1.103:9997;FailCA='.
Action ended 16:04:26: AddReceivingIndexerData. Return value 1.
MSI (s) (54:B4) [16:04:26:811]: Doing action: AddReceivingIndexer
MSI (s) (54:B4) [16:04:26:811]: Note: 1: 2205 2: 3: ActionText
Action 16:04:26: AddReceivingIndexer.
Action start 16:04:26: AddReceivingIndexer.
AddReceivingIndexer:
Action ended 16:04:26: AddReceivingIndexer. Return value 1.
MSI (s) (54:B4) [16:04:26:811]: Skipping action: SetupCertData (condition is false)
MSI (s) (54:B4) [16:04:26:811]: Skipping action: SetupCert (condition is false)
MSI (s) (54:B4) [16:04:26:811]: Skipping action: SetupServiceConfigData (condition is false)
MSI (s) (54:B4) [16:04:26:811]: Skipping action: SetupServiceConfig (condition is false)
MSI (s) (54:B4) [16:04:26:811]: Doing action: EnableEventLogsData
MSI (s) (54:B4) [16:04:26:811]: Note: 1: 2205 2: 3: ActionText
Action 16:04:26: EnableEventLogsData.
Action start 16:04:26: EnableEventLogsData.
MSI (s) (54:B4) [16:04:26:811]: PROPERTY CHANGE: Adding EnableEventLogs property. Its value is 'SplunkHome=C:\Program Files\SplunkUniversalForwarder\;App=; Sec=; Sys=;Fwd=; Set=;FailCA='.
Action ended 16:04:26: EnableEventLogsData. Return value 1.
MSI (s) (54:B4) [16:04:26:811]: Doing action: EnableEventLogs
MSI (s) (54:B4) [16:04:26:811]: Note: 1: 2205 2: 3: ActionText
Action 16:04:26: EnableEventLogs.
Action start 16:04:26: EnableEventLogs.
EnableEventLogs:
Action ended 16:04:26: EnableEventLogs. Return value 1.
MSI (s) (54:B4) [16:04:26:811]: Skipping action: EnableAdmonData (condition is false)
MSI (s) (54:B4) [16:04:26:811]: Skipping action: EnableAdmon (condition is false)
MSI (s) (54:B4) [16:04:26:811]: Skipping action: EnablePerfmonData (condition is false)
MSI (s) (54:B4) [16:04:26:811]: Skipping action: EnablePerfmon (condition is false)
MSI (s) (54:B4) [16:04:26:811]: Doing action: EnableDeploymentServerData
MSI (s) (54:B4) [16:04:26:811]: Note: 1: 2205 2: 3: ActionText
Action 16:04:26: EnableDeploymentServerData.
Action start 16:04:26: EnableDeploymentServerData.
MSI (s) (54:B4) [16:04:26:827]: PROPERTY CHANGE: Adding EnableDeploymentServer property. Its value is 'SplunkHome=C:\Program Files\SplunkUniversalForwarder\;DeploymentServer=172.16.1.103:8089;FailCA='.
Action ended 16:04:26: EnableDeploymentServerData. Return value 1.
MSI (s) (54:B4) [16:04:26:827]: Doing action: EnableDeploymentServer
MSI (s) (54:B4) [16:04:26:827]: Note: 1: 2205 2: 3: ActionText
Action 16:04:26: EnableDeploymentServer.
Action start 16:04:26: EnableDeploymentServer.
EnableDeploymentServer:
Action ended 16:04:26: EnableDeploymentServer. Return value 1.
MSI (s) (54:B4) [16:04:26:827]: Skipping action: AddMonitorPathData (condition is false)
MSI (s) (54:B4) [16:04:26:827]: Skipping action: AddMonitorPath (condition is false)
MSI (s) (54:B4) [16:04:26:827]: Skipping action: RollbackGroupAndRightsFromRegData (condition is false)
MSI (s) (54:B4) [16:04:26:827]: Skipping action: RollbackGroupAndRightsFromReg (condition is false)
MSI (s) (54:B4) [16:04:26:827]: Skipping action: SaveGroupAndRightsToRegistryData (condition is false)
MSI (s) (54:B4) [16:04:26:827]: Skipping action: SaveGroupAndRightsToRegistry (condition is false)
MSI (s) (54:B4) [16:04:26:827]: Skipping action: RollbackSetAccountRightsData (condition is false)
MSI (s) (54:B4) [16:04:26:827]: Skipping action: RollbackSetAccountRights (condition is false)
MSI (s) (54:B4) [16:04:26:827]: Skipping action: SetAccountRightsData (condition is false)
MSI (s) (54:B4) [16:04:26:827]: Skipping action: SetAccountRights (condition is false)
MSI (s) (54:B4) [16:04:26:827]: Skipping action: SetUserAclsData (condition is false)
MSI (s) (54:B4) [16:04:26:827]: Skipping action: SetUserAcls (condition is false)
MSI (s) (54:B4) [16:04:26:827]: Skipping action: RollbackSetAccountGroupsData (condition is false)
MSI (s) (54:B4) [16:04:26:827]: Skipping action: RollbackSetAccountGroups (condition is false)
MSI (s) (54:B4) [16:04:26:827]: Skipping action: SetAccountGroupsData (condition is false)
MSI (s) (54:B4) [16:04:26:827]: Skipping action: SetAccountGroups (condition is false)
MSI (s) (54:B4) [16:04:26:827]: Skipping action: ClonePrepClearConfigData (condition is false)
MSI (s) (54:B4) [16:04:26:827]: Skipping action: ClonePrepClearConfig (condition is false)
MSI (s) (54:B4) [16:04:26:827]: Doing action: StartSplunkServiceData
MSI (s) (54:B4) [16:04:26:827]: Note: 1: 2205 2: 3: ActionText
Action 16:04:26: StartSplunkServiceData.
Action start 16:04:26: StartSplunkServiceData.
MSI (s) (54:B4) [16:04:26:827]: PROPERTY CHANGE: Adding StartSplunkService property. Its value is 'SplunkHome=C:\Program Files\SplunkUniversalForwarder\;SplunkSvcName=SplunkForwarder;LaunchSplunk=1;FailCA='.
Action ended 16:04:26: StartSplunkServiceData. Return value 1.
MSI (s) (54:B4) [16:04:26:827]: Doing action: StartSplunkService
MSI (s) (54:B4) [16:04:26:827]: Note: 1: 2205 2: 3: ActionText
Action 16:04:26: StartSplunkService.
Action start 16:04:26: StartSplunkService.
StartSplunkService:
Action ended 16:04:26: StartSplunkService. Return value 1.
MSI (s) (54:B4) [16:04:26:827]: Doing action: RegisterUser
MSI (s) (54:B4) [16:04:26:827]: Note: 1: 2205 2: 3: ActionText
Action 16:04:26: RegisterUser. Registering user
Action start 16:04:26: RegisterUser.
Action ended 16:04:26: RegisterUser. Return value 1.
MSI (s) (54:B4) [16:04:26:842]: Doing action: RegisterProduct
MSI (s) (54:B4) [16:04:26:842]: Note: 1: 2205 2: 3: ActionText
Action 16:04:26: RegisterProduct. Registering product
Action start 16:04:26: RegisterProduct.
MSI (s) (54:B4) [16:04:26:842]: Note: 1: 2205 2: 3: Error
MSI (s) (54:B4) [16:04:26:842]: Note: 1: 2228 2: 3: Error 4: SELECT `Message` FROM `Error` WHERE `Error` = 1302
RegisterProduct: Registering product
MSI (s) (54:B4) [16:04:26:842]: PROPERTY CHANGE: Adding ProductToBeRegistered property. Its value is '1'.
Action ended 16:04:26: RegisterProduct. Return value 1.
MSI (s) (54:B4) [16:04:26:842]: Doing action: PublishFeatures
MSI (s) (54:B4) [16:04:26:842]: Note: 1: 2205 2: 3: ActionText
Action 16:04:26: PublishFeatures. Publishing Product Features
Action start 16:04:26: PublishFeatures.
PublishFeatures: Feature: Publishing Product Features
Action ended 16:04:26: PublishFeatures. Return value 1.
MSI (s) (54:B4) [16:04:26:842]: Doing action: PublishProduct
MSI (s) (54:B4) [16:04:26:842]: Note: 1: 2205 2: 3: ActionText
Action 16:04:26: PublishProduct. Publishing product information
Action start 16:04:26: PublishProduct.
PublishProduct:
Action ended 16:04:26: PublishProduct. Return value 1.
MSI (s) (54:B4) [16:04:26:842]: Doing action: InstallFinalize
MSI (s) (54:B4) [16:04:26:842]: Note: 1: 2205 2: 3: ActionText
Action 16:04:26: InstallFinalize.
Action start 16:04:26: InstallFinalize.
MSI (s) (54:B4) [16:04:26:842]: Running Script: C:\Windows\Installer\MSI30AB.tmp
MSI (s) (54:B4) [16:04:26:842]: PROPERTY CHANGE: Adding UpdateStarted property. Its value is '1'.
MSI (s) (54:B4) [16:04:26:858]: Note: 1: 2265 2: 3: -2147287035
MSI (s) (54:B4) [16:04:26:858]: Machine policy value 'DisableRollback' is 0
MSI (s) (54:B4) [16:04:26:858]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\Rollback\Scripts 3: 2
MSI (s) (54:B4) [16:04:26:858]: Executing op: Header(Signature=1397708873,Version=500,Timestamp=1184268430,LangId=1033,Platform=589824,ScriptType=1,ScriptMajorVersion=21,ScriptMinorVersion=4,ScriptAttributes=1)
MSI (s) (54:B4) [16:04:26:858]: Executing op: ProductInfo(ProductKey={D77B0D44-D35B-4BD3-A54E-89CBAE2086E6},ProductName=UniversalForwarder,PackageName=splunkforwarder-6.2.2-255606-x64-release.msi,Language=1033,Version=100794370,Assignment=1,ObsoleteArg=0,ProductIcon=WixSplunkIcon,,PackageCode={1586EC18-33AD-4646-B29D-F56E77D62B32},,,InstanceType=0,LUASetting=0,RemoteURTInstalls=0,ProductDeploymentFlags=2)
MSI (s) (54:B4) [16:04:26:858]: Executing op: DialogInfo(Type=0,Argument=1033)
MSI (s) (54:B4) [16:04:26:858]: Executing op: DialogInfo(Type=1,Argument=UniversalForwarder)
MSI (s) (54:B4) [16:04:26:858]: Executing op: RollbackInfo(,RollbackAction=Rollback,RollbackDescription=Rolling back action:,RollbackTemplate=[1],CleanupAction=RollbackCleanup,CleanupDescription=Removing backup files,CleanupTemplate=File: [1])
MSI (s) (54:B4) [16:04:26:858]: Executing op: SetBaseline(Baseline=0,)
MSI (s) (54:B4) [16:04:26:858]: Executing op: SetBaseline(Baseline=1,)
MSI (s) (54:B4) [16:04:26:858]: Executing op: ActionStart(Name=ProcessComponents,Description=Updating component registration,)
Action 16:04:26: ProcessComponents. Updating component registration
MSI (s) (54:B4) [16:04:26:858]: Executing op: ProgressTotal(Total=210,Type=1,ByteEquivalent=24000)
MSI (s) (54:B4) [16:04:26:858]: Executing op: ComponentRegister(ComponentId={49754B66-727F-4546-8FA9-EB7B2623D35F},KeyPath=C:\Program Files\SplunkUniversalForwarder\copyright.txt,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=1)
1: {D77B0D44-D35B-4BD3-A54E-89CBAE2086E6} 2: {49754B66-727F-4546-8FA9-EB7B2623D35F} 3: C:\Program Files\SplunkUniversalForwarder\copyright.txt
MSI (s) (54:B4) [16:04:26:858]: Executing op: ComponentRegister(ComponentId={9D30A491-8A6B-4931-9095-959C97C90E91},KeyPath=C:\Program Files\SplunkUniversalForwarder\ftr,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=1)
1: {D77B0D44-D35B-4BD3-A54E-89CBAE2086E6} 2: {9D30A491-8A6B-4931-9095-959C97C90E91} 3: C:\Program Files\SplunkUniversalForwarder\ftr
MSI (s) (54:B4) [16:04:26:858]: Executing op: ComponentRegister(ComponentId={2189ABF4-59CD-41E6-80F8-565993C7B90A},KeyPath=C:\Program Files\SplunkUniversalForwarder\license-eula.rtf,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=1)
1: {D77B0D44-D35B-4BD3-A54E-89CBAE2086E6} 2: {2189ABF4-59CD-41E6-80F8-565993C7B90A} 3: C:\Program Files\SplunkUniversalForwarder\license-eula.rtf
MSI (s) (54:B4) [16:04:26:858]: Executing op: ComponentRegister(ComponentId={D835A2C7-2E4A-46B3-B8BD-ABA6F3715A54},KeyPath=C:\Program Files\SplunkUniversalForwarder\license-eula.txt,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=1)
1: {D77B0D44-D35B-4BD3-A54E-89CBAE2086E6} 2: {D835A2C7-2E4A-46B3-B8BD-ABA6F3715A54} 3: C:\Program Files\SplunkUniversalForwarder\license-eula.txt
MSI (s) (54:B4) [16:04:26:858]: Executing op: ComponentRegister(ComponentId={99F494DD-187B-4C4F-B794-D10EC84649F9},KeyPath=C:\Program Files\SplunkUniversalForwarder\manifest.txt,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=1)
1: {D77B0D44-D35B-4BD3-A54E-89CBAE2086E6} 2: {99F494DD-187B-4C4F-B794-D10EC84649F9} 3: C:\Program Files\SplunkUniversalForwarder\manifest.txt
MSI (s) (54:B4) [16:04:26:858]: Executing op: ComponentRegister(ComponentId={9B270D9B-D8CC-4437-996B-15D6996945EF},KeyPath=C:\Program Files\SplunkUniversalForwarder\openssl.cnf,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=1)
1: {D77B0D44-D35B-4BD3-A54E-89CBAE2086E6} 2: {9B270D9B-D8CC-4437-996B-15D6996945EF} 3: C:\Program Files\SplunkUniversalForwarder\openssl.cnf
MSI (s) (54:B4) [16:04:26:858]: Executing op: ComponentRegister(ComponentId={92320FC2-59AF-4066-A69F-6A9FF95C6638},KeyPath=C:\Program Files\SplunkUniversalForwarder\README-splunk.txt,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=1)
1: {D77B0D44-D35B-4BD3-A54E-89CBAE2086E6} 2: {92320FC2-59AF-4066-A69F-6A9FF95C6638} 3: C:\Program Files\SplunkUniversalForwarder\README-splunk.txt
MSI (s) (54:B4) [16:04:26:858]: Executing op: ComponentRegister(ComponentId={24BEDC24-2D89-4641-9BE1-DE14E900FF81},KeyPath=C:\Program Files\SplunkUniversalForwarder\bin\archive.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=1)
1: {D77B0D44-D35B-4BD3-A54E-89CBAE2086E6} 2: {24BEDC24-2D89-4641-9BE1-DE14E900FF81} 3: C:\Program Files\SplunkUniversalForwarder\bin\archive.dll
MSI (s) (54:B4) [16:04:26:873]: Executing op: ComponentRegister(ComponentId={031D8A86-F0CB-4DDF-B00E-57374C639292},KeyPath=C:\Program Files\SplunkUniversalForwarder\bin\btool.exe,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=1)
1: {D77B0D44-D35B-4BD3-A54E-89CBAE2086E6} 2: {031D8A86-F0CB-4DDF-B00E-57374C639292} 3: C:\Program Files\SplunkUniversalForwarder\bin\btool.exe
MSI (s) (54:B4) [16:04:26:873]: Executing op: ComponentRegister(ComponentId={2593CAEC-B7D3-45D1-BF95-EB72A770E1A1},KeyPath=C:\Program Files\SplunkUniversalForwarder\bin\btprobe.exe,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=1)
1: {D77B0D44-D35B-4BD3-A54E-89CBAE2086E6} 2: {2593CAEC-B7D3-45D1-BF95-EB72A770E1A1} 3: C:\Program Files\SplunkUniversalForwarder\bin\btprobe.exe
MSI (s) (54:B4) [16:04:26:873]: Executing op: ComponentRegister(ComponentId={F5F5982A-762D-4985-9913-39684CFD45F5},KeyPath=C:\Program Files\SplunkUniversalForwarder\bin\classify.exe,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=1)
1: {D77B0D44-D35B-4BD3-A54E-89CBAE2086E6} 2: {F5F5982A-762D-4985-9913-39684CFD45F5} 3: C:\Program Files\SplunkUniversalForwarder\bin\classify.exe
MSI (s) (54:B4) [16:04:26:873]: Executing op: ComponentRegister(ComponentId={99AD84EB-CD1B-4F4B-8E91-D4D184C90C5C},KeyPath=C:\Program Files\SplunkUniversalForwarder\bin\copyright.txt,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=1)
1: {D77B0D44-D35B-4BD3-A54E-89CBAE2086E6} 2: {99AD84EB-CD1B-4F4B-8E91-D4D184C90C5C} 3: C:\Program Files\SplunkUniversalForwarder\bin\copyright.txt
MSI (s) (54:B4) [16:04:26:873]: Executing op: ComponentRegister(ComponentId={A13700BF-93FF-481A-A6F0-DFC5D3FEBFF6},KeyPath=C:\Program Files\SplunkUniversalForwarder\bin\genRootCA.bat,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=1)
1: {D77B0D44-D35B-4BD3-A54E-89CBAE2086E6} 2: {A13700BF-93FF-481A-A6F0-DFC5D3FEBFF6} 3: C:\Program Files\SplunkUniversalForwarder\bin\genRootCA.bat
MSI (s) (54:B4) [16:04:26:873]: Executing op: ComponentRegister(ComponentId={1C5D6E34-87A5-4B08-A42D-F8C69748BF2B},KeyPath=C:\Program Files\SplunkUniversalForwarder\bin\libbson-1.0.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=1)
1: {D77B0D44-D35B-4BD3-A54E-89CBAE2086E6} 2: {1C5D6E34-87A5-4B08-A42D-F8C69748BF2B} 3: C:\Program Files\SplunkUniversalForwarder\bin\libbson-1.0.dll
MSI (s) (54:B4) [16:04:26:873]: Executing op: ComponentRegister(ComponentId={BCDB8480-A21C-41D3-A5C8-2086FC7D0162},KeyPath=C:\Program Files\SplunkUniversalForwarder\bin\libeay32.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=1)
1: {D77B0D44-D35B-4BD3-A54E-89CBAE2086E6} 2: {BCDB8480-A21C-41D3-A5C8-2086FC7D0162} 3: C:\Program Files\SplunkUniversalForwarder\bin\libeay32.dll
MSI (s) (54:B4) [16:04:26:873]: Executing op: ComponentRegister(ComponentId={90A99965-3791-45CE-ACA7-405AFA977D63},KeyPath=C:\Program Files\SplunkUniversalForwarder\bin\libexslt.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=1)
1: {D77B0D44-D35B-4BD3-A54E-89CBAE2086E6} 2: {90A99965-3791-45CE-ACA7-405AFA977D63} 3: C:\Program Files\SplunkUniversalForwarder\bin\libexslt.dll
MSI (s) (54:B4) [16:04:26:873]: Executing op: ComponentRegister(ComponentId={3701C3AC-45FB-4FB1-86FA-86F090EC6729},KeyPath=C:\Program Files\SplunkUniversalForwarder\bin\libxml2.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=1)
1: {D77B0D44-D35B-4BD3-A54E-89CBAE2086E6} 2: {3701C3AC-45FB-4FB1-86FA-86F090EC6729} 3: C:\Program Files\SplunkUniversalForwarder\bin\libxml2.dll
MSI (s) (54:B4) [16:04:26:873]: Executing op: ComponentRegister(ComponentId={D341BB6B-284E-49C3-AA68-B827D1E538D7},KeyPath=C:\Program Files\SplunkUniversalForwarder\bin\libxslt.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=1)
1: {D77B0D44-D35B-4BD3-A54E-89CBAE2086E6} 2: {D341BB6B-284E-49C3-AA68-B827D1E538D7} 3: C:\Program Files\SplunkUniversalForwarder\bin\libxslt.dll
MSI (s) (54:B4) [16:04:26:873]: Executing op: ComponentRegister(ComponentId={8A614382-D7B8-4C4B-B72C-54D155B42D7A},KeyPath=C:\Program Files\SplunkUniversalForwarder\bin\msvcp110.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=1)
1: {D77B0D44-D35B-4BD3-A54E-89CBAE2086E6} 2: {8A614382-D7B8-4C4B-B72C-54D155B42D7A} 3: C:\Program Files\SplunkUniversalForwarder\bin\msvcp110.dll
MSI (s) (54:B4) [16:04:26:873]: Executing op: ComponentRegister(ComponentId={9D53BFFE-246E-4299-9438-D7254419E124},KeyPath=C:\Program Files\SplunkUniversalForwarder\bin\msvcr110.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=1)
1: {D77B0D44-D35B-4BD3-A54E-89CBAE2086E6} 2: {9D53BFFE-246E-4299-9438-D7254419E124} 3: C:\Program Files\SplunkUniversalForwarder\bin\msvcr110.dll
MSI (s) (54:B4) [16:04:26:873]: Executing op: ComponentRegister(ComponentId={0072A5BC-392B-4568-80BB-D2FC2083F06A},KeyPath=C:\Program Files\SplunkUniversalForwarder\bin\openssl.exe,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=1)
1: {D77B0D44-D35B-4BD3-A54E-89CBAE2086E6} 2: {0072A5BC-392B-4568-80BB-D2FC2083F06A} 3: C:\Program Files\SplunkUniversalForwarder\bin\openssl.exe
MSI (s) (54:B4) [16:04:26:873]: Executing op: ComponentRegister(ComponentId={62937E61-3B89-4957-8F7F-F41BE9BB655B},KeyPath=C:\Program Files\SplunkUniversalForwarder\bin\splknetdrv-vista.cat,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=1)
1: {D77B0D44-D35B-4BD3-A54E-89CBAE2086E6} 2: {62937E61-3B89-4957-8F7F-F41BE9BB655B} 3: C:\Program Files\SplunkUniversalForwarder\bin\splknetdrv-vista.cat
MSI (s) (54:B4) [16:04:26:873]: Executing op: ComponentRegister(ComponentId={B2CB61A6-8466-42F3-8277-04FBED28B18D},KeyPath=C:\Program Files\SplunkUniversalForwarder\bin\splknetdrv-vista.inf,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=1)
1: {D77B0D44-D35B-4BD3-A54E-89CBAE2086E6} 2: {B2CB61A6-8466-42F3-8277-04FBED28B18D} 3: C:\Program Files\SplunkUniversalForwarder\bin\splknetdrv-vista.inf
MSI (s) (54:B4) [16:04:26:873]: Executing op: ComponentRegister(ComponentId={C32DA926-4533-4214-B26C-9E91B3E37E45},KeyPath=C:\Program Files\SplunkUniversalForwarder\bin\splknetdrv-vista.sys,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=1)
1: {D77B0D44-D35B-4BD3-A54E-89CBAE2086E6} 2: {C32DA926-4533-4214-B26C-9E91B3E37E45} 3: C:\Program Files\SplunkUniversalForwarder\bin\splknetdrv-vista.sys
MSI (s) (54:B4) [16:04:26:873]: Executing op: ComponentRegister(ComponentId={66572B30-3550-4247-BE8F-33030C62C895},KeyPath=C:\Program Files\SplunkUniversalForwarder\bin\splknetdrv-win7.cat,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=1)
1: {D77B0D44-D35B-4BD3-A54E-89CBAE2086E6} 2: {66572B30-3550-4247-BE8F-33030C62C895} 3: C:\Program Files\SplunkUniversalForwarder\bin\splknetdrv-win7.cat
MSI (s) (54:B4) [16:04:26:873]: Executing op: ComponentRegister(ComponentId={C4E770DB-11B7-4173-B47B-FD9842717120},KeyPath=C:\Program Files\SplunkUniversalForwarder\bin\splknetdrv-win7.inf,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=1)
1: {D77B0D44-D35B-4BD3-A54E-89CBAE2086E6} 2: {C4E770DB-11B7-4173-B47B-FD9842717120} 3: C:\Program Files\SplunkUniversalForwarder\bin\splknetdrv-win7.inf
MSI (s) (54:B4) [16:04:26:889]: Executing op: ComponentRegister(ComponentId={567BD974-D453-4FC7-96B5-F7A6A10416C6},KeyPath=C:\Program Files\SplunkUniversalForwarder\bin\splknetdrv-win7.sys,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=1)
1: {D77B0D44-D35B-4BD3-A54E-89CBAE2086E6} 2: {567BD974-D453-4FC7-96B5-F7A6A10416C6} 3: C:\Program Files\SplunkUniversalForwarder\bin\splknetdrv-win7.sys
MSI (s) (54:B4) [16:04:26:889]: Executing op: ComponentRegister(ComponentId={F0B99991-22CA-46D4-82FE-92750C3838A3},KeyPath=C:\Program Files\SplunkUniversalForwarder\bin\splknetdrv-win8.cat,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=1)
1: {D77B0D44-D35B-4BD3-A54E-89CBAE2086E6} 2: {F0B99991-22CA-46D4-82FE-92750C3838A3} 3: C:\Program Files\SplunkUniversalForwarder\bin\splknetdrv-win8.cat
MSI (s) (54:B4) [16:04:26:889]: Executing op: ComponentRegister(ComponentId={CD1A723A-621B-4E54-B582-4720007EBF48},KeyPath=C:\Program Files\SplunkUniversalForwarder\bin\splknetdrv-win8.inf,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=1)
1: {D77B0D44-D35B-4BD3-A54E-89CBAE2086E6} 2: {CD1A723A-621B-4E54-B582-4720007EBF48} 3: C:\Program Files\SplunkUniversalForwarder\bin\splknetdrv-win8.inf
MSI (s) (54:B4) [16:04:26:889]: Executing op: ComponentRegister(ComponentId={547DDEF0-C33D-4BD4-9DAF-E682097A7357},KeyPath=C:\Program Files\SplunkUniversalForwarder\bin\splknetdrv-win8.sys,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=1)
1: {D77B0D44-D35B-4BD3-A54E-89CBAE2086E6} 2: {547DDEF0-C33D-4BD4-9DAF-E682097A7357} 3: C:\Program Files\SplunkUniversalForwarder\bin\splknetdrv-win8.sys
MSI (s) (54:B4) [16:04:26:889]: Executing op: ComponentRegister(ComponentId={F7D24936-0A3E-4161-A783-2FA227D524CC},KeyPath=C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=1)
1: {D77B0D44-D35B-4BD3-A54E-89CBAE2086E6} 2: {F7D24936-0A3E-4161-A783-2FA227D524CC} 3: C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe
MSI (s) (54:B4) [16:04:26:889]: Executing op: ComponentRegister(ComponentId={D0A7DA41-A99A-49DF-BD2B-95DB2D821768},KeyPath=C:\Program Files\SplunkUniversalForwarder\bin\splunk-compresstool.exe,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=1)
1: {D77B0D44-D35B-4BD3-A54E-89CBAE2086E6} 2: {D0A7DA41-A99A-49DF-BD2B-95DB2D821768} 3: C:\Program Files\SplunkUniversalForwarder\bin\splunk-compresstool.exe
MSI (s) (54:B4) [16:04:26:889]: Executing op: ComponentRegister(ComponentId={4D42D5C9-C6FF-44BE-A274-EEF94A1D7A33},KeyPath=C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=1)
1: {D77B0D44-D35B-4BD3-A54E-89CBAE2086E6} 2: {4D42D5C9-C6FF-44BE-A274-EEF94A1D7A33} 3: C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe
MSI (s) (54:B4) [16:04:26:889]: Executing op: ComponentRegister(ComponentId={5EC3ABE6-CD30-48B2-B81E-95A466CA8319},KeyPath=C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=1)
1: {D77B0D44-D35B-4BD3-A54E-89CBAE2086E6} 2: {5EC3ABE6-CD30-48B2-B81E-95A466CA8319} 3: C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe
MSI (s) (54:B4) [16:04:26:889]: Executing op: ComponentRegister(ComponentId={CD44DD8D-1113-470A-A04B-02C54D6D7F3A},KeyPath=C:\Program Files\SplunkUniversalForwarder\bin\splunk-perfmon.exe,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=1)
1: {D77B0D44-D35B-4BD3-A54E-89CBAE2086E6} 2: {CD44DD8D-1113-470A-A04B-02C54D6D7F3A} 3: C:\Program Files\SplunkUniversalForwarder\bin\splunk-perfmon.exe
MSI (s) (54:B4) [16:04:26:889]: Executing op: ComponentRegister(ComponentId={783A9018-3727-4666-9868-B3A66B0037C9},KeyPath=C:\Program Files\SplunkUniversalForwarder\bin\splunk-regmon.exe,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=1)
1: {D77B0D44-D35B-4BD3-A54E-89CBAE2086E6} 2: {783A9018-3727-4666-9868-B3A66B0037C9} 3: C:\Program Files\SplunkUniversalForwarder\bin\splunk-regmon.exe
MSI (s) (54:B4) [16:04:26:889]: Executing op: ComponentRegister(ComponentId={3FF78844-5208-4EA3-B12F-1C5312F47F96},KeyPath=C:\Program Files\SplunkUniversalForwarder\bin\splunk-winevtlog.exe,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=1)
1: {D77B0D44-D35B-4BD3-A54E-89CBAE2086E6} 2: {3FF78844-5208-4EA3-B12F-1C5312F47F96} 3: C:\Program Files\SplunkUniversalForwarder\bin\splunk-winevtlog.exe
MSI (s) (54:B4) [16:04:26:889]: Executing op: ComponentRegister(ComponentId={37C55C63-F44A-40AF-99E5-38EDE658AA9A},KeyPath=C:\Program Files\SplunkUniversalForwarder\bin\splunk-winhostinfo.exe,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=1)
1: {D77B0D44-D35B-4BD3-A54E-89CBAE2086E6} 2: {37C55C63-F44A-40AF-99E5-38EDE658AA9A} 3: C:\Program Files\SplunkUniversalForwarder\bin\splunk-winhostinfo.exe
MSI (s) (54:B4) [16:04:26:889]: Executing op: ComponentRegister(ComponentId={E9B44CE5-BA0E-4C30-A5D6-9F52D05BC618},KeyPath=C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=1)
1: {D77B0D44-D35B-4BD3-A54E-89CBAE2086E6} 2: {E9B44CE5-BA0E-4C30-A5D6-9F52D05BC618} 3: C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe
MSI (s) (54:B4) [16:04:26:889]: Executing op: ComponentRegister(ComponentId={BA814E7C-A9A6-4F8F-91E5-34667D0FC247},KeyPath=C:\Program Files\SplunkUniversalForwarder\bin\splunk-wmi.exe,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=1)
1: {D77B0D44-D35B-4BD3-A54E-89CBAE2086E6} 2: {BA814E7C-A9A6-4F8F-91E5-34667D0FC247} 3: C:\Program Files\SplunkUniversalForwarder\bin\splunk-wmi.exe
MSI (s) (54:B4) [16:04:26:889]: Executing op: ComponentRegister(ComponentId={CBD85592-53D9-408A-9D12-78261F1F2ECD},KeyPath=C:\Program Files\SplunkUniversalForwarder\bin\splunk.exe,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=1)
1: {D77B0D44-D35B-4BD3-A54E-89CBAE2086E6} 2: {CBD85592-53D9-408A-9D12-78261F1F2ECD} 3: C:\Program Files\SplunkUniversalForwarder\bin\splunk.exe
MSI (s) (54:B4) [16:04:26:889]: Executing op: ComponentRegister(ComponentId={E3A18EDC-5539-49A0-8E58-30605DBE5B06},KeyPath=C:\Program Files\SplunkUniversalForwarder\bin\splunkd.exe,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=1)
1: {D77B0D44-D35B-4BD3-A54E-89CBAE2086E6} 2: {E3A18EDC-5539-49A0-8E58-30605DBE5B06} 3: C:\Program Files\SplunkUniversalForwarder\bin\splunkd.exe
MSI (s) (54:B4) [16:04:26:889]: Executing op: ComponentRegister(ComponentId={A7E505C8-0714-4EE5-B5EA-E484822051F0},KeyPath=C:\Program Files\SplunkUniversalForwarder\bin\splunkdrv-win6.cat,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=1)
1: {D77B0D44-D35B-4BD3-A54E-89CBAE2086E6} 2: {A7E505C8-0714-4EE5-B5EA-E484822051F0} 3: C:\Program Files\SplunkUniversalForwarder\bin\splunkdrv-win6.cat
MSI (s) (54:B4) [16:04:26:905]: Executing op: ComponentRegister(ComponentId={FE35CAAA-544E-4E5A-A909-BD8483265954},KeyPath=C:\Program Files\SplunkUniversalForwarder\bin\splunkdrv-win6.inf,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=1)
1: {D77B0D44-D35B-4BD3-A54E-89CBAE2086E6} 2: {FE35CAAA-544E-4E5A-A909-BD8483265954} 3: C:\Program Files\SplunkUniversalForwarder\bin\splunkdrv-win6.inf
MSI (s) (54:B4) [16:04:26:905]: Executing op: ComponentRegister(ComponentId={84BA23E5-89E1-4B5A-9EF0-4C4D54479E2C},KeyPath=C:\Program Files\SplunkUniversalForwarder\bin\splunkdrv-win6.sys,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=1)
1: {D77B0D44-D35B-4BD3-A54E-89CBAE2086E6} 2: {84BA23E5-89E1-4B5A-9EF0-4C4D54479E2C} 3: C:\Program Files\SplunkUniversalForwarder\bin\splunkdrv-win6.sys
MSI (s) (54:B4) [16:04:26:905]: Executing op: ComponentRegister(ComponentId={2F1CD552-21B4-4941-9691-2B1D88135D42},KeyPath=C:\Program Files\SplunkUniversalForwarder\bin\splunkdrv.cat,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=1)
1: {D77B0D44-D35B-4BD3-A54E-89CBAE2086E6} 2: {2F1CD552-21B4-4941-9691-2B1D88135D42} 3: C:\Program Files\SplunkUniversalForwarder\bin\splunkdrv.cat
MSI (s) (54:B4) [16:04:26:905]: Executing op: ComponentRegister(ComponentId={A6D95A03-2DC1-4A22-B463-35F72A0DCE38},KeyPath=C:\Program Files\SplunkUniversalForwarder\bin\splunkdrv.inf,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=1)
1: {D77B0D44-D35B-4BD3-A54E-89CBAE2086E6} 2: {A6D95A03-2DC1-4A22-B463-35F72A0DCE38} 3: C:\Program Files\SplunkUniversalForwarder\bin\splunkdrv.inf
MSI (s) (54:B4) [16:04:26:905]: Executing op: ComponentRegister(ComponentId={154E06B2-D55A-4461-82BA-0D1C91D71A09},KeyPath=C:\Program Files\SplunkUniversalForwarder\bin\splunkdrv.sys,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=1)
1: {D77B0D44-D35B-4BD3-A54E-89CBAE2086E6} 2: {154E06B2-D55A-4461-82BA-0D1C91D71A09} 3: C:\Program Files\SplunkUniversalForwarder\bin\splunkdrv.sys
MSI (s) (54:B4) [16:04:26:905]: Executing op: ComponentRegister(ComponentId={B2CB3CFA-0E1E-44CC-8BC1-6F13E9B0537D},KeyPath=C:\Program Files\SplunkUniversalForwarder\bin\SplunkMonitorNoHandledrv-vista.cat,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=1)
1: {D77B0D44-D35B-4BD3-A54E-89CBAE2086E6} 2: {B2CB3CFA-0E1E-44CC-8BC1-6F13E9B0537D} 3: C:\Program Files\SplunkUniversalForwarder\bin\SplunkMonitorNoHandledrv-vista.cat
MSI (s) (54:B4) [16:04:26:905]: Executing op: ComponentRegister(ComponentId={3D30C1E0-CD66-4A37-9C56-A447F1BA6A99},KeyPath=C:\Program Files\SplunkUniversalForwarder\bin\SplunkMonitorNoHandledrv-vista.inf,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=1)
1: {D77B0D44-D35B-4BD3-A54E-89CBAE2086E6} 2: {3D30C1E0-CD66-4A37-9C56-A447F1BA6A99} 3: C:\Program Files\SplunkUniversalForwarder\bin\SplunkMonitorNoHandledrv-vista.inf
MSI (s) (54:B4) [16:04:26:905]: Executing op: ComponentRegister(ComponentId={EE8BADF5-E4AE-4E95-BC97-0E8FF763E1C9},KeyPath=C:\Program Files\SplunkUniversalForwarder\bin\SplunkMonitorNoHandledrv-vista.sys,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=1)
1: {D77B0D44-D35B-4BD3-A54E-89CBAE2086E6} 2: {EE8BADF5-E4AE-4E95-BC97-0E8FF763E1C9} 3: C:\Program Files\SplunkUniversalForwarder\bin\SplunkMonitorNoHandledrv-vista.sys
MSI (s) (54:B4) [16:04:26:905]: Executing op: ComponentRegister(ComponentId={66D827A8-089C-499C-A7A4-095185671D00},KeyPath=C:\Program Files\SplunkUniversalForwarder\bin\SplunkMonitorNoHandledrv-win7.cat,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=1)
1: {D77B0D44-D35B-4BD3-A54E-89CBAE2086E6} 2: {66D827A8-089C-499C-A7A4-095185671D00} 3: C:\Program Files\SplunkUniversalForwarder\bin\SplunkMonitorNoHandledrv-win7.cat
MSI (s) (54:B4) [16:04:26:905]: Executing op: ComponentRegister(ComponentId={52BC84FA-6320-45C1-8A4F-C9B772C034BF},KeyPath=C:\Program Files\SplunkUniversalForwarder\bin\SplunkMonitorNoHandledrv-win7.inf,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=1)
1: {D77B0D44-D35B-4BD3-A54E-89CBAE2086E6} 2: {52BC84FA-6320-45C1-8A4F-C9B772C034BF} 3: C:\Program Files\SplunkUniversalForwarder\bin\SplunkMonitorNoHandledrv-win7.inf
MSI (s) (54:B4) [16:04:26:905]: Executing op: ComponentRegister(ComponentId={5A760E6D-0ECE-42D0-92AA-5D7CCCD15CAF},KeyPath=C:\Program Files\SplunkUniversalForwarder\bin\SplunkMonitorNoHandledrv-win7.sys,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=1)
1: {D77B0D44-D35B-4BD3-A54E-89CBAE2086E6} 2: {5A760E6D-0ECE-42D0-92AA-5D7CCCD15CAF} 3: C:\Program Files\SplunkUniversalForwarder\bin\SplunkMonitorNoHandledrv-win7.sys
MSI (s) (54:B4) [16:04:26:905]: Executing op: ComponentRegister(ComponentId={AB68F81D-30B8-44D1-B883-AF1F17BC1EED},KeyPath=C:\Program Files\SplunkUniversalForwarder\bin\SplunkMonitorNoHandledrv-win8.cat,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=1)
1: {D77B0D44-D35B-4BD3-A54E-89CBAE2086E6} 2: {AB68F81D-30B8-44D1-B883-AF1F17BC1EED} 3: C:\Program Files\SplunkUniversalForwarder\bin\SplunkMonitorNoHandledrv-win8.cat
MSI (s) (54:B4) [16:04:26:905]: Executing op: ComponentRegister(ComponentId={A8106DCC-7D3A-44F9-9BD7-16B9CC5C824E},KeyPath=C:\Program Files\SplunkUniversalForwarder\bin\SplunkMonitorNoHandledrv-win8.inf,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=1)
1: {D77B0D44-D35B-4BD3-A54E-89CBAE2086E6} 2: {A8106DCC-7D3A-44F9-9BD7-16B9CC5C824E} 3: C:\Program Files\SplunkUniversalForwarder\bin\SplunkMonitorNoHandledrv-win8.inf
MSI (s) (54:B4) [16:04:26:905]: Executing op: ComponentRegister(ComponentId={436429E1-7E15-4B5F-9D2C-19B11F3F7E3C},KeyPath=C:\Program Files\SplunkUniversalForwarder\bin\SplunkMonitorNoHandledrv-win8.sys,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=1)
1: {D77B0D44-D35B-4BD3-A54E-89CBAE2086E6} 2: {436429E1-7E15-4B5F-9D2C-19B11F3F7E3C} 3: C:\Program Files\SplunkUniversalForwarder\bin\SplunkMonitorNoHandledrv-win8.sys
MSI (s) (54:B4) [16:04:26:905]: Executing op: ComponentRegister(ComponentId={885030E9-2A02-43F4-B74E-FBC71CF342AD},KeyPath=C:\Program Files\SplunkUniversalForwarder\bin\srm.exe,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=1)
1: {D77B0D44-D35B-4BD3-A54E-89CBAE2086E6} 2: {885030E9-2A02-43F4-B74E-FBC71CF342AD} 3: C:\Program Files\SplunkUniversalForwarder\bin\srm.exe
MSI (s) (54:B4) [16:04:26:905]: Executing op: ComponentRegister(ComponentId={7E11335C-07EE-4A9D-9DCD-DD4E1E889B19},KeyPath=C:\Program Files\SplunkUniversalForwarder\bin\ssleay32.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=1)
1: {D77B0D44-D35B-4BD3-A54E-89CBAE2086E6} 2: {7E11335C-07EE-4A9D-9DCD-DD4E1E889B19} 3: C:\Program Files\SplunkUniversalForwarder\bin\ssleay32.dll
MSI (s) (54:B4) [16:04:26:905]: Executing op: ComponentRegister(ComponentId={8BF906C2-1D48-4B42-BEA7-A57E77F875F9},KeyPath=C:\Program Files\SplunkUniversalForwarder\bin\scripts\readme.txt,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=1)
1: {D77B0D44-D35B-4BD3-A54E-89CBAE2086E6} 2: {8BF906C2-1D48-4B42-BEA7-A57E77F875F9} 3: C:\Program Files\SplunkUniversalForwarder\bin\scripts\readme.txt
MSI (s) (54:B4) [16:04:26:920]: Executing op: ComponentRegister(ComponentId={81261A43-1380-42C9-A52F-282382120F54},KeyPath=C:\Program Files\SplunkUniversalForwarder\bin\scripts\splunk-admon.path,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=1)
1: {D77B0D44-D35B-4BD3-A54E-89CBAE2086E6} 2: {81261A43-1380-42C9-A52F-282382120F54} 3: C:\Program Files\SplunkUniversalForwarder\bin\scripts\splunk-admon.path
MSI (s) (54:B4) [16:04:26:920]: Executing op: ComponentRegister(ComponentId={D2CEC0DA-9DEB-4101-8FDB-216F9B822F4F},KeyPath=C:\Program Files\SplunkUniversalForwarder\bin\scripts\splunk-MonitorNoHandle.path,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=1)
1: {D77B0D44-D35B-4BD3-A54E-89CBAE2086E6} 2: {D2CEC0DA-9DEB-4101-8FDB-216F9B822F4F} 3: C:\Program Files\SplunkUniversalForwarder\bin\scripts\splunk-MonitorNoHandle.path
MSI (s) (54:B4) [16:04:26:920]: Executing op: ComponentRegister(ComponentId={C7600429-C56F-4EB8-9FC1-2EE5478C3950},KeyPath=C:\Program Files\SplunkUniversalForwarder\bin\scripts\splunk-netmon.path,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=1)
1: {D77B0D44-D35B-4BD3-A54E-89CBAE2086E6} 2: {C7600429-C56F-4EB8-9FC1-2EE5478C3950} 3: C:\Program Files\SplunkUniversalForwarder\bin\scripts\splunk-netmon.path
MSI (s) (54:B4) [16:04:26:920]: Executing op: ComponentRegister(ComponentId={AD425D95-3E2B-4F14-9D7E-359072F62F0C},KeyPath=C:\Program Files\SplunkUniversalForwarder\bin\scripts\splunk-perfmon.path,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=1)
1: {D77B0D44-D35B-4BD3-A54E-89CBAE2086E6} 2: {AD425D95-3E2B-4F14-9D7E-359072F62F0C} 3: C:\Program Files\SplunkUniversalForwarder\bin\scripts\splunk-perfmon.path
MSI (s) (54:B4) [16:04:26:920]: Executing op: ComponentRegister(ComponentId={87D8E98F-8552-4D5C-9B27-151A08CAA775},KeyPath=C:\Program Files\SplunkUniversalForwarder\bin\scripts\splunk-regmon.path,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=1)
1: {D77B0D44-D35B-4BD3-A54E-89CBAE2086E6} 2: {87D8E98F-8552-4D5C-9B27-151A08CAA775} 3: C:\Program Files\SplunkUniversalForwarder\bin\scripts\splunk-regmon.path
MSI (s) (54:B4) [16:04:26:920]: Executing op: ComponentRegister(ComponentId={A4527929-EB26-4CBF-B337-410D80775965},KeyPath=C:\Program Files\SplunkUniversalForwarder\bin\scripts\splunk-winevtlog.path,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=1)
1: {D77B0D44-D35B-4BD3-A54E-89CBAE2086E6} 2: {A4527929-EB26-4CBF-B337-410D80775965} 3: C:\Program Files\SplunkUniversalForwarder\bin\scripts\splunk-winevtlog.path
MSI (s) (54:B4) [16:04:26:920]: Executing op: ComponentRegister(ComponentId={743170C2-C53D-4484-BF32-A232D6951F20},KeyPath=C:\Program Files\SplunkUniversalForwarder\bin\scripts\splunk-winhostmon.path,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=1)
1: {D77B0D44-D35B-4BD3-A54E-89CBAE2086E6} 2: {743170C2-C53D-4484-BF32-A232D6951F20} 3: C:\Program Files\SplunkUniversalForwarder\bin\scripts\splunk-winhostmon.path
MSI (s) (54:B4) [16:04:26:920]: Executing op: ComponentRegister(ComponentId={4E9A1C91-EAFC-4B5F-9975-6B6AF810DF7C},KeyPath=C:\Program Files\SplunkUniversalForwarder\bin\scripts\splunk-winprintmon.path,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=1)
1: {D77B0D44-D35B-4BD3-A54E-89CBAE2086E6} 2: {4E9A1C91-EAFC-4B5F-9975-6B6AF810DF7C} 3: C:\Program Files\SplunkUniversalForwarder\bin\scripts\splunk-winprintmon.path
MSI (s) (54:B4) [16:04:26:920]: Executing op: ComponentRegister(ComponentId={B87B1BBF-DE2B-47F2-8A41-7CA8BDBC6C52},KeyPath=C:\Program Files\SplunkUniversalForwarder\bin\scripts\splunk-wmi.path,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=1)
1: {D77B0D44-D35B-4BD3-A54E-89CBAE2086E6} 2: {B87B1BBF-DE2B-47F2-8A41-7CA8BDBC6C52} 3: C:\Program Files\SplunkUniversalForwarder\bin\scripts\splunk-wmi.path
MSI (s) (54:B4) [16:04:26:920]: Executing op: ComponentRegister(ComponentId={9FF64740-7DF9-4D45-B2A9-690FFA097F56},KeyPath=C:\Program Files\SplunkUniversalForwarder\etc\copyright.txt,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=1)
1: {D77B0D44-D35B-4BD3-A54E-89CBAE2086E6} 2: {9FF64740-7DF9-4D45-B2A9-690FFA097F56} 3: C:\Program Files\SplunkUniversalForwarder\etc\copyright.txt
MSI (s) (54:B4) [16:04:26:920]: Executing op: ComponentRegister(ComponentId={BBD78A1F-41FA-4307-958F-B3FB28F38A8A},KeyPath=C:\Program Files\SplunkUniversalForwarder\etc\datetime.xml,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=1)
1: {D77B0D44-D35B-4BD3-A54E-89CBAE2086E6} 2: {BBD78A1F-41FA-4307-958F-B3FB28F38A8A} 3: C:\Program Files\SplunkUniversalForwarder\etc\datetime.xml
MSI (s) (54:B4) [16:04:26:920]: Executing op: ComponentRegister(ComponentId={03BD2DA0-3064-497A-99F2-BD96ECA5AA0E},KeyPath=C:\Program Files\SplunkUniversalForwarder\etc\log-btool-debug.cfg,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=1)
1: {D77B0D44-D35B-4BD3-A54E-89CBAE2086E6} 2: {03BD2DA0-3064-497A-99F2-BD96ECA5AA0E} 3: C:\Program Files\SplunkUniversalForwarder\etc\log-btool-debug.cfg
MSI (s) (54:B4) [16:04:26:920]: Executing op: ComponentRegister(ComponentId={A6610DAD-D379-46EA-B961-694E0D6B1C3B},KeyPath=C:\Program Files\SplunkUniversalForwarder\etc\log-btool.cfg,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=1)
1: {D77B0D44-D35B-4BD3-A54E-89CBAE2086E6} 2: {A6610DAD-D379-46EA-B961-694E0D6B1C3B} 3: C:\Program Files\SplunkUniversalForwarder\etc\log-btool.cfg
MSI (s) (54:B4) [16:04:26:920]: Executing op: ComponentRegister(ComponentId={52E78CB7-BA6E-422C-81DF-88C7A44AB875},KeyPath=C:\Program Files\SplunkUniversalForwarder\etc\log-cmdline-debug.cfg,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=1)
1: {D77B0D44-D35B-4BD3-A54E-89CBAE2086E6} 2: {52E78CB7-BA6E-422C-81DF-88C7A44AB875} 3: C:\Program Files\SplunkUniversalForwarder\etc\log-cmdline-debug.cfg
MSI (s) (54:B4) [16:04:26:920]: Executing op: ComponentRegister(ComponentId={913206DA-4B1E-45A4-B698-7B6270159D49},KeyPath=C:\Program Files\SplunkUniversalForwarder\etc\log-cmdline.cfg,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=1)
1: {D77B0D44-D35B-4BD3-A54E-89CBAE2086E6} 2: {913206DA-4B1E-45A4-B698-7B6270159D49} 3: C:\Program Files\SplunkUniversalForwarder\etc\log-cmdline.cfg
MSI (s) (54:B4) [16:04:26:920]: Executing op: ComponentRegister(ComponentId={057C87CF-C340-43D6-8080-9F8421572EA4},KeyPath=C:\Program Files\SplunkUniversalForwarder\etc\log-debug.cfg,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=1)
1: {D77B0D44-D35B-4BD3-A54E-89CBAE2086E6} 2: {057C87CF-C340-43D6-8080-9F8421572EA4} 3: C:\Program Files\SplunkUniversalForwarder\etc\log-debug.cfg
MSI (s) (54:B4) [16:04:26:920]: Executing op: ComponentRegister(ComponentId={C25F72FF-036F-4ABA-968E-BDEC975326CA},KeyPath=C:\Program Files\SplunkUniversalForwarder\etc\log-utility.cfg,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=1)
1: {D77B0D44-D35B-4BD3-A54E-89CBAE2086E6} 2: {C25F72FF-036F-4ABA-968E-BDEC975326CA} 3: C:\Program Files\SplunkUniversalForwarder\etc\log-utility.cfg
MSI (s) (54:B4) [16:04:26:936]: Executing op: ComponentRegister(ComponentId={921B0181-C47A-4BB4-8E72-E0E90E880427},KeyPath=C:\Program Files\SplunkUniversalForwarder\etc\log.cfg,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=1)
1: {D77B0D44-D35B-4BD3-A54E-89CBAE2086E6} 2: {921B0181-C47A-4BB4-8E72-E0E90E880427} 3: C:\Program Files\SplunkUniversalForwarder\etc\log.cfg
MSI (s) (54:B4) [16:04:26:936]: Executing op: ComponentRegister(ComponentId={36CD8D75-17E9-481B-ABC5-274837680A36},KeyPath=C:\Program Files\SplunkUniversalForwarder\etc\prettyprint.xsl,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=1)
1: {D77B0D44-D35B-4BD3-A54E-89CBAE2086E6} 2: {36CD8D75-17E9-481B-ABC5-274837680A36} 3: C:\Program Files\SplunkUniversalForwarder\etc\prettyprint.xsl
MSI (s) (54:B4) [16:04:26:936]: Executing op: ComponentRegister(ComponentId={76A02305-B2DC-4028-886C-E940C1B5A794},KeyPath=C:\Program Files\SplunkUniversalForwarder\etc\splunk-launch.conf.default,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=1)
1: {D77B0D44-D35B-4BD3-A54E-89CBAE2086E6} 2: {76A02305-B2DC-4028-886C-E940C1B5A794} 3: C:\Program Files\SplunkUniversalForwarder\etc\splunk-launch.conf.default
MSI (s) (54:B4) [16:04:26:936]: Executing op: ComponentRegister(ComponentId={77082AE9-16E3-4FAF-9F60-0C4D1BA1FE0A},KeyPath=C:\Program Files\SplunkUniversalForwarder\etc\splunk.version,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=1)
1: {D77B0D44-D35B-4BD3-A54E-89CBAE2086E6} 2: {77082AE9-16E3-4FAF-9F60-0C4D1BA1FE0A} 3: C:\Program Files\SplunkUniversalForwarder\etc\splunk.version
MSI (s) (54:B4) [16:04:26:936]: Executing op: ComponentRegister(ComponentId={A8E37052-2640-4F8F-A855-4EA1DC96B7C3},KeyPath=C:\Program Files\SplunkUniversalForwarder\etc\apps\introspection_generator_addon\bin\collector.path,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=1)
1: {D77B0D44-D35B-4BD3-A54E-89CBAE2086E6} 2: {A8E37052-2640-4F8F-A855-4EA1DC96B7C3} 3: C:\Program Files\SplunkUniversalForwarder\etc\apps\introspection_generator_addon\bin\collector.path
MSI (s) (54:B4) [16:04:26:936]: Executing op: ComponentRegister(ComponentId={27A62B1E-D2C5-45C4-87D8-A7A11F0E8D7E},KeyPath=C:\Program Files\SplunkUniversalForwarder\etc\apps\introspection_generator_addon\default\app.conf,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=1)
1: {D77B0D44-D35B-4BD3-A54E-89CBAE2086E6} 2: {27A62B1E-D2C5-45C4-87D8-A7A11F0E8D7E} 3: C:\Program Files\SplunkUniversalForwarder\etc\apps\introspection_generator_addon\default\app.conf
MSI (s) (54:B4) [16:04:26:936]: Executing op: ComponentRegister(ComponentId={7AD82923-B821-4AFE-BA35-0FF229C65385},KeyPath=C:\Program Files\SplunkUniversalForwarder\etc\apps\introspection_generator_addon\default\inputs.conf,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=1)
1: {D77B0D44-D35B-4BD3-A54E-89CBAE2086E6} 2: {7AD82923-B821-4AFE-BA35-0FF229C65385} 3: C:\Program Files\SplunkUniversalForwarder\etc\apps\introspection_generator_addon\default\inputs.conf
MSI (s) (54:B4) [16:04:26:936]: Executing op: ComponentRegister(ComponentId={2269B35B-3794-4038-964C-C52680D8F644},KeyPath=C:\Program Files\SplunkUniversalForwarder\etc\apps\introspection_generator_addon\default\README,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=1)
1: {D77B0D44-D35B-4BD3-A54E-89CBAE2086E6} 2: {2269B35B-3794-4038-964C-C52680D8F644} 3: C:\Program Files\SplunkUniversalForwarder\etc\apps\introspection_generator_addon\default\README
MSI (s) (54:B4) [16:04:26:936]: Executing op: ComponentRegister(ComponentId={4034DE9E-3266-411C-81AB-8D6F1C2C675B},KeyPath=C:\Program Files\SplunkUniversalForwarder\etc\apps\introspection_generator_addon\default\server.conf,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=1)
1: {D77B0D44-D35B-4BD3-A54E-89CBAE2086E6} 2: {4034DE9E-3266-411C-81AB-8D6F1C2C675B} 3: C:\Program Files\SplunkUniversalForwarder\etc\apps\introspection_generator_addon\default\server.conf
MSI (s) (54:B4) [16:04:26:936]: Executing op: ComponentRegister(ComponentId={E18C9F3E-2544-45A2-B5CA-DF9138C4C4C3},KeyPath=C:\Program Files\SplunkUniversalForwarder\etc\apps\learned\default\README,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=1)
1: {D77B0D44-D35B-4BD3-A54E-89CBAE2086E6} 2: {E18C9F3E-2544-45A2-B5CA-DF9138C4C4C3} 3: C:\Program Files\SplunkUniversalForwarder\etc\apps\learned\default\README
MSI (s) (54:B4) [16:04:26:936]: Executing op: ComponentRegister(ComponentId={43683CFD-3DDE-4D00-8BF7-BA51D8D0245D},KeyPath=C:\Program Files\SplunkUniversalForwarder\etc\apps\learned\metadata\default.meta,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=1)
1: {D77B0D44-D35B-4BD3-A54E-89CBAE2086E6} 2: {43683CFD-3DDE-4D00-8BF7-BA51D8D0245D} 3: C:\Program Files\SplunkUniversalForwarder\etc\apps\learned\metadata\default.meta
MSI (s) (54:B4) [16:04:26:936]: Executing op: ComponentRegister(ComponentId={5D87F470-0EF8-4092-8582-90A05E754976},KeyPath=C:\Program Files\SplunkUniversalForwarder\etc\apps\search\default\app.conf,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=1)
1: {D77B0D44-D35B-4BD3-A54E-89CBAE2086E6} 2: {5D87F470-0EF8-4092-8582-90A05E754976} 3: C:\Program Files\SplunkUniversalForwarder\etc\apps\search\default\app.conf
MSI (s) (54:B4) [16:04:26:936]: Executing op: ComponentRegister(ComponentId={1FBAA0E9-A0C4-4983-B010-7FDCDA1B5F80},KeyPath=C:\Program Files\SplunkUniversalForwarder\etc\apps\search\default\inputs.conf,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=1)
1: {D77B0D44-D35B-4BD3-A54E-89CBAE2086E6} 2: {1FBAA0E9-A0C4-4983-B010-7FDCDA1B5F80} 3: C:\Program Files\SplunkUniversalForwarder\etc\apps\search\default\inputs.conf
MSI (s) (54:B4) [16:04:26:936]: Executing op: ComponentRegister(ComponentId={59F22E04-5AC6-4419-9CFF-E4A79F7EFDC0},KeyPath=C:\Program Files\SplunkUniversalForwarder\etc\apps\search\default\props.conf,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=1)
1: {D77B0D44-D35B-4BD3-A54E-89CBAE2086E6} 2: {59F22E04-5AC6-4419-9CFF-E4A79F7EFDC0} 3: C:\Program Files\SplunkUniversalForwarder\etc\apps\search\default\props.conf
MSI (s) (54:B4) [16:04:26:936]: Executing op: ComponentRegister(ComponentId={EB4137FC-6E95-49AC-A08D-C02FC261B3AA},KeyPath=C:\Program Files\SplunkUniversalForwarder\etc\apps\search\default\restmap.conf,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=1)
1: {D77B0D44-D35B-4BD3-A54E-89CBAE2086E6} 2: {EB4137FC-6E95-49AC-A08D-C02FC261B3AA} 3: C:\Program Files\SplunkUniversalForwarder\etc\apps\search\default\restmap.conf
MSI (s) (54:B4) [16:04:26:936]: Executing op: ComponentRegister(ComponentId={A5C6AA84-EE22-4D73-AFF6-2F60A0E6CCCF},KeyPath=C:\Program Files\SplunkUniversalForwarder\etc\apps\search\lookups\README,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=1)
1: {D77B0D44-D35B-4BD3-A54E-89CBAE2086E6} 2: {A5C6AA84-EE22-4D73-AFF6-2F60A0E6CCCF} 3: C:\Program Files\SplunkUniversalForwarder\etc\apps\search\lookups\README
MSI (s) (54:B4) [16:04:26:936]: Executing op: ComponentRegister(ComponentId={585336B8-53C6-4243-9634-922A09D28AEA},KeyPath=C:\Program Files\SplunkUniversalForwarder\etc\apps\search\metadata\default.meta,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=1)
1: {D77B0D44-D35B-4BD3-A54E-89CBAE2086E6} 2: {585336B8-53C6-4243-9634-922A09D28AEA} 3: C:\Program Files\SplunkUniversalForwarder\etc\apps\search\metadata\default.meta
MSI (s) (54:B4) [16:04:26:952]: Executing op: ComponentRegister(ComponentId={8FB170A0-AD95-43F1-9089-284C3EFBF310},KeyPath=C:\Program Files\SplunkUniversalForwarder\etc\apps\SplunkUniversalForwarder\default\app.conf,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=1)
1: {D77B0D44-D35B-4BD3-A54E-89CBAE2086E6} 2: {8FB170A0-AD95-43F1-9089-284C3EFBF310} 3: C:\Program Files\SplunkUniversalForwarder\etc\apps\SplunkUniversalForwarder\default\app.conf
MSI (s) (54:B4) [16:04:26:952]: Executing op: ComponentRegister(ComponentId={F314E101-B3AC-4561-AA2F-D09571DE4455},KeyPath=C:\Program Files\SplunkUniversalForwarder\etc\apps\SplunkUniversalForwarder\default\default-mode.conf,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=1)
1: {D77B0D44-D35B-4BD3-A54E-89CBAE2086E6} 2: {F314E101-B3AC-4561-AA2F-D09571DE4455} 3: C:\Program Files\SplunkUniversalForwarder\etc\apps\SplunkUniversalForwarder\default\default-mode.conf
MSI (s) (54:B4) [16:04:26:952]: Executing op: ComponentRegister(ComponentId={CC9D0092-BB8C-45C5-B3F9-DD36C58F3FB3},KeyPath=C:\Program Files\SplunkUniversalForwarder\etc\apps\SplunkUniversalForwarder\default\inputs.conf,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=1)
1: {D77B0D44-D35B-4BD3-A54E-89CBAE2086E6} 2: {CC9D0092-BB8C-45C5-B3F9-DD36C58F3FB3} 3: C:\Program Files\SplunkUniversalForwarder\etc\apps\SplunkUniversalForwarder\default\inputs.conf
MSI (s) (54:B4) [16:04:26:952]: Executing op: ComponentRegister(ComponentId={16676143-7A2B-4677-9A98-18CA1CE4E430},KeyPath=C:\Program Files\SplunkUniversalForwarder\etc\apps\SplunkUniversalForwarder\default\limits.conf,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=1)
1: {D77B0D44-D35B-4BD3-A54E-89CBAE2086E6} 2: {16676143-7A2B-4677-9A98-18CA1CE4E430} 3: C:\Program Files\SplunkUniversalForwarder\etc\apps\SplunkUniversalForwarder\default\limits.conf
MSI (s) (54:B4) [16:04:26:952]: Executing op: ComponentRegister(ComponentId={B96E3E47-1E65-4047-9B5E-552791FD5FDD},KeyPath=C:\Program Files\SplunkUniversalForwarder\etc\apps\SplunkUniversalForwarder\default\outputs.conf,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=1)
1: {D77B0D44-D35B-4BD3-A54E-89CBAE2086E6} 2: {B96E3E47-1E65-4047-9B5E-552791FD5FDD} 3: C:\Program Files\SplunkUniversalForwarder\etc\apps\SplunkUniversalForwarder\default\outputs.conf
MSI (s) (54:B4) [16:04:26:952]: Executing op: ComponentRegister(ComponentId={FD8D69F4-5BFB-4C05-90A0-D01CA47833AC},KeyPath=C:\Program Files\SplunkUniversalForwarder\etc\apps\SplunkUniversalForwarder\default\props.conf,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=1)
1: {D77B0D44-D35B-4BD3-A54E-89CBAE2086E6} 2: {FD8D69F4-5BFB-4C05-90A0-D01CA47833AC} 3: C:\Program Files\SplunkUniversalForwarder\etc\apps\SplunkUniversalForwarder\default\props.conf
MSI (s) (54:B4) [16:04:26:952]: Executing op: ComponentRegister(ComponentId={4C4B02A8-42B5-41EE-A8EC-5C63A8AB6603},KeyPath=C:\Program Files\SplunkUniversalForwarder\etc\apps\SplunkUniversalForwarder\default\README,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=1)
1: {D77B0D44-D35B-4BD3-A54E-89CBAE2086E6} 2: {4C4B02A8-42B5-41EE-A8EC-5C63A8AB6603} 3: C:\Program Files\SplunkUniversalForwarder\etc\apps\SplunkUniversalForwarder\default\README
MSI (s) (54:B4) [16:04:26:952]: Executing op: ComponentRegister(ComponentId={6E0119F3-F31D-4F3F-AF49-ED5C3CC4C64F},KeyPath=C:\Program Files\SplunkUniversalForwarder\etc\apps\SplunkUniversalForwarder\default\server.conf,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=1)
1: {D77B0D44-D35B-4BD3-A54E-89CBAE2086E6} 2: {6E0119F3-F31D-4F3F-AF49-ED5C3CC4C64F} 3: C:\Program Files\SplunkUniversalForwarder\etc\apps\SplunkUniversalForwarder\default\server.conf
MSI (s) (54:B4) [16:04:26:952]: Executing op: ComponentRegister(ComponentId={CB4A7932-BDD0-4C3E-9BB8-173BC6F0DADA},KeyPath=C:\Program Files\SplunkUniversalForwarder\etc\apps\SplunkUniversalForwarder\default\web.conf,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=1)
1: {D77B0D44-D35B-4BD3-A54E-89CBAE2086E6} 2: {CB4A7932-BDD0-4C3E-9BB8-173BC6F0DADA} 3: C:\Program Files\SplunkUniversalForwarder\etc\apps\SplunkUniversalForwarder\default\web.conf
MSI (s) (54:B4) [16:04:26:952]: Executing op: ComponentRegister(ComponentId={ABFDFC20-2599-4433-BE08-D562ACB5100C},KeyPath=C:\Program Files\SplunkUniversalForwarder\etc\apps\SplunkUniversalForwarder\metadata\default.meta,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=1)
1: {D77B0D44-D35B-4BD3-A54E-89CBAE2086E6} 2: {ABFDFC20-2599-4433-BE08-D562ACB5100C} 3: C:\Program Files\SplunkUniversalForwarder\etc\apps\SplunkUniversalForwarder\metadata\default.meta
MSI (s) (54:B4) [16:04:26:952]: Executing op: ComponentRegister(ComponentId={70AFEF9B-90CE-4B85-8447-20EB8DCADB28},KeyPath=C:\Program Files\SplunkUniversalForwarder\etc\auth\ca.pem.default,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=1)
1: {D77B0D44-D35B-4BD3-A54E-89CBAE2086E6} 2: {70AFEF9B-90CE-4B85-8447-20EB8DCADB28} 3: C:\Program Files\SplunkUniversalForwarder\etc\auth\ca.pem.default
MSI (s) (54:B4) [16:04:26:952]: Executing op: ComponentRegister(ComponentId={2CB289F3-7757-4FAC-BA95-9145B760B2BB},KeyPath=C:\Program Files\SplunkUniversalForwarder\etc\auth\cacert.pem.default,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=1)
1: {D77B0D44-D35B-4BD3-A54E-89CBAE2086E6} 2: {2CB289F3-7757-4FAC-BA95-9145B760B2BB} 3: C:\Program Files\SplunkUniversalForwarder\etc\auth\cacert.pem.default
MSI (s) (54:B4) [16:04:26:952]: Executing op: ComponentRegister(ComponentId={056DC3F9-2223-49EE-8A6A-971B4699D24F},KeyPath=C:\Program Files\SplunkUniversalForwarder\etc\deployment-apps\README,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=1)
1: {D77B0D44-D35B-4BD3-A54E-89CBAE2086E6} 2: {056DC3F9-2223-49EE-8A6A-971B4699D24F} 3: C:\Program Files\SplunkUniversalForwarder\etc\deployment-apps\README
MSI (s) (54:B4) [16:04:26:952]: Executing op: ComponentRegister(ComponentId={7966E299-DE9D-4D10-A524-58ED712D7667},KeyPath=C:\Program Files\SplunkUniversalForwarder\etc\disabled-apps\README,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=1)
1: {D77B0D44-D35B-4BD3-A54E-89CBAE2086E6} 2: {7966E299-DE9D-4D10-A524-58ED712D7667} 3: C:\Program Files\SplunkUniversalForwarder\etc\disabled-apps\README
MSI (s) (54:B4) [16:04:26:952]: Executing op: ComponentRegister(ComponentId={276268CF-8430-444D-8ED0-F5FB680DDA29},KeyPath=C:\Program Files\SplunkUniversalForwarder\etc\modules\input\exec\config.xml,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=1)
1: {D77B0D44-D35B-4BD3-A54E-89CBAE2086E6} 2: {276268CF-8430-444D-8ED0-F5FB680DDA29} 3: C:\Program Files\SplunkUniversalForwarder\etc\modules\input\exec\config.xml
MSI (s) (54:B4) [16:04:26:952]: Executing op: ComponentRegister(ComponentId={E10B87D2-3AA7-4492-87A1-AC8D4FD5B369},KeyPath=C:\Program Files\SplunkUniversalForwarder\etc\modules\input\fschangemanager\config.xml,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=1)
1: {D77B0D44-D35B-4BD3-A54E-89CBAE2086E6} 2: {E10B87D2-3AA7-4492-87A1-AC8D4FD5B369} 3: C:\Program Files\SplunkUniversalForwarder\etc\modules\input\fschangemanager\config.xml
MSI (s) (54:B4) [16:04:26:952]: Executing op: ComponentRegister(ComponentId={19AFBC3B-52C9-41DE-95FE-992FC04E0544},KeyPath=C:\Program Files\SplunkUniversalForwarder\etc\modules\input\structuredparsing\config.xml,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=1)
1: {D77B0D44-D35B-4BD3-A54E-89CBAE2086E6} 2: {19AFBC3B-52C9-41DE-95FE-992FC04E0544} 3: C:\Program Files\SplunkUniversalForwarder\etc\modules\input\structuredparsing\config.xml
MSI (s) (54:B4) [16:04:26:952]: Executing op: ComponentRegister(ComponentId={A7E168FF-B8EE-4EE0-B95A-2A4BD8B12655},KeyPath=C:\Program Files\SplunkUniversalForwarder\etc\modules\input\tailfile\config.xml,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=1)
1: {D77B0D44-D35B-4BD3-A54E-89CBAE2086E6} 2: {A7E168FF-B8EE-4EE0-B95A-2A4BD8B12655} 3: C:\Program Files\SplunkUniversalForwarder\etc\modules\input\tailfile\config.xml
MSI (s) (54:B4) [16:04:26:967]: Executing op: ComponentRegister(ComponentId={30F8BF95-1DB2-4CE8-8EBB-9F9BEF442089},KeyPath=C:\Program Files\SplunkUniversalForwarder\etc\modules\input\TCP\config.xml,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=1)
1: {D77B0D44-D35B-4BD3-A54E-89CBAE2086E6} 2: {30F8BF95-1DB2-4CE8-8EBB-9F9BEF442089} 3: C:\Program Files\SplunkUniversalForwarder\etc\modules\input\TCP\config.xml
MSI (s) (54:B4) [16:04:26:967]: Executing op: ComponentRegister(ComponentId={790C68F3-C492-4510-81BD-814F85F5439F},KeyPath=C:\Program Files\SplunkUniversalForwarder\etc\modules\input\UDP\config.xml,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=1)
1: {D77B0D44-D35B-4BD3-A54E-89CBAE2086E6} 2: {790C68F3-C492-4510-81BD-814F85F5439F} 3: C:\Program Files\SplunkUniversalForwarder\etc\modules\input\UDP\config.xml
MSI (s) (54:B4) [16:04:26:967]: Executing op: ComponentRegister(ComponentId={737D13FF-9750-4F79-A62F-A5931B255766},KeyPath=C:\Program Files\SplunkUniversalForwarder\etc\modules\input\wineventlog\config.xml,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=1)
1: {D77B0D44-D35B-4BD3-A54E-89CBAE2086E6} 2: {737D13FF-9750-4F79-A62F-A5931B255766} 3: C:\Program Files\SplunkUniversalForwarder\etc\modules\input\wineventlog\config.xml
MSI (s) (54:B4) [16:04:26:967]: Executing op: ComponentRegister(ComponentId={C555C2F4-1ECA-4834-8F9A-C1D1020DF6EC},KeyPath=C:\Program Files\SplunkUniversalForwarder\etc\modules\input\winparsing\config.xml,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=1)
1: {D77B0D44-D35B-4BD3-A54E-89CBAE2086E6} 2: {C555C2F4-1ECA-4834-8F9A-C1D1020DF6EC} 3: C:\Program Files\SplunkUniversalForwarder\etc\modules\input\winparsing\config.xml
MSI (s) (54:B4) [16:04:26:967]: Executing op: ComponentRegister(ComponentId={67662931-22EB-45E2-9F53-66F340CCFA2C},KeyPath=C:\Program Files\SplunkUniversalForwarder\etc\modules\parsing\config.xml,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=1)
1: {D77B0D44-D35B-4BD3-A54E-89CBAE2086E6} 2: {67662931-22EB-45E2-9F53-66F340CCFA2C} 3: C:\Program Files\SplunkUniversalForwarder\etc\modules\parsing\config.xml
MSI (s) (54:B4) [16:04:26:967]: Executing op: ComponentRegister(ComponentId={B3A2AF29-2D93-4F28-B7C7-53F3AE6E7CBE},KeyPath=C:\Program Files\SplunkUniversalForwarder\etc\myinstall\splunkd.xml.cfg-default,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=1)
1: {D77B0D44-D35B-4BD3-A54E-89CBAE2086E6} 2: {B3A2AF29-2D93-4F28-B7C7-53F3AE6E7CBE} 3: C:\Program Files\SplunkUniversalForwarder\etc\myinstall\splunkd.xml.cfg-default
MSI (s) (54:B4) [16:04:26:967]: Executing op: ComponentRegister(ComponentId={9B25A363-D4EC-4A22-86D1-7E37EE2D6BDF},KeyPath=C:\Program Files\SplunkUniversalForwarder\etc\shcluster\apps\README,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=1)
1: {D77B0D44-D35B-4BD3-A54E-89CBAE2086E6} 2: {9B25A363-D4EC-4A22-86D1-7E37EE2D6BDF} 3: C:\Program Files\SplunkUniversalForwarder\etc\shcluster\apps\README
MSI (s) (54:B4) [16:04:26:967]: Executing op: ComponentRegister(ComponentId={37575D6D-DCA4-4224-B12F-83C85C223F69},KeyPath=C:\Program Files\SplunkUniversalForwarder\etc\shcluster\users\README,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=1)
1: {D77B0D44-D35B-4BD3-A54E-89CBAE2086E6} 2: {37575D6D-DCA4-4224-B12F-83C85C223F69} 3: C:\Program Files\SplunkUniversalForwarder\etc\shcluster\users\README
MSI (s) (54:B4) [16:04:26:967]: Executing op: ComponentRegister(ComponentId={5005F009-211C-4827-8066-CE6AB3875FE5},KeyPath=C:\Program Files\SplunkUniversalForwarder\etc\system\bin\admon.cmd,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=1)
1: {D77B0D44-D35B-4BD3-A54E-89CBAE2086E6} 2: {5005F009-211C-4827-8066-CE6AB3875FE5} 3: C:\Program Files\SplunkUniversalForwarder\etc\system\bin\admon.cmd
MSI (s) (54:B4) [16:04:26:967]: Executing op: ComponentRegister(ComponentId={2978B3AC-39BF-48F7-B125-C094183ED18B},KeyPath=C:\Program Files\SplunkUniversalForwarder\etc\system\bin\MonitorNoHandle.cmd,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=1)
1: {D77B0D44-D35B-4BD3-A54E-89CBAE2086E6} 2: {2978B3AC-39BF-48F7-B125-C094183ED18B} 3: C:\Program Files\SplunkUniversalForwarder\etc\system\bin\MonitorNoHandle.cmd
MSI (s) (54:B4) [16:04:26:967]: Executing op: ComponentRegister(ComponentId={A37F115C-F15B-46F6-B569-FBF3681F69F6},KeyPath=C:\Program Files\SplunkUniversalForwarder\etc\system\bin\perfmon.cmd,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=1)
1: {D77B0D44-D35B-4BD3-A54E-89CBAE2086E6} 2: {A37F115C-F15B-46F6-B569-FBF3681F69F6} 3: C:\Program Files\SplunkUniversalForwarder\etc\system\bin\perfmon.cmd
MSI (s) (54:B4) [16:04:26:967]: Executing op: ComponentRegister(ComponentId={212F18AA-8DCF-4926-A66B-DCF7B881F43B},KeyPath=C:\Program Files\SplunkUniversalForwarder\etc\system\bin\winEventLog.cmd,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=1)
1: {D77B0D44-D35B-4BD3-A54E-89CBAE2086E6} 2: {212F18AA-8DCF-4926-A66B-DCF7B881F43B} 3: C:\Program Files\SplunkUniversalForwarder\etc\system\bin\winEventLog.cmd
MSI (s) (54:B4) [16:04:26:967]: Executing op: ComponentRegister(ComponentId={137506E1-1F7B-417F-9087-33A293A95A5C},KeyPath=C:\Program Files\SplunkUniversalForwarder\etc\system\bin\WinHostMon.cmd,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=1)
1: {D77B0D44-D35B-4BD3-A54E-89CBAE2086E6} 2: {137506E1-1F7B-417F-9087-33A293A95A5C} 3: C:\Program Files\SplunkUniversalForwarder\etc\system\bin\WinHostMon.cmd
MSI (s) (54:B4) [16:04:26:967]: Executing op: ComponentRegister(ComponentId={98B908BC-02F5-4CF4-BCFD-7E3D7BD5C8D9},KeyPath=C:\Program Files\SplunkUniversalForwarder\etc\system\bin\WinNetMon.cmd,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=1)
1: {D77B0D44-D35B-4BD3-A54E-89CBAE2086E6} 2: {98B908BC-02F5-4CF4-BCFD-7E3D7BD5C8D9} 3: C:\Program Files\SplunkUniversalForwarder\etc\system\bin\WinNetMon.cmd
MSI (s) (54:B4) [16:04:26:967]: Executing op: ComponentRegister(ComponentId={E3F6E262-987D-4388-AC99-7543BEFA8270},KeyPath=C:\Program Files\SplunkUniversalForwarder\etc\system\bin\WinPrintMon.cmd,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=1)
1: {D77B0D44-D35B-4BD3-A54E-89CBAE2086E6} 2: {E3F6E262-987D-4388-AC99-7543BEFA8270} 3: C:\Program Files\SplunkUniversalForwarder\etc\system\bin\WinPrintMon.cmd
MSI (s) (54:B4) [16:04:26:967]: Executing op: ComponentRegister(ComponentId={0385BD08-BB3A-440E-93D1-0CF6DF0A979D},KeyPath=C:\Program Files\SplunkUniversalForwarder\etc\system\bin\WinRegMon.cmd,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=1)
1: {D77B0D44-D35B-4BD3-A54E-89CBAE2086E6} 2: {0385BD08-BB3A-440E-93D1-0CF6DF0A979D} 3: C:\Program Files\SplunkUniversalForwarder\etc\system\bin\WinRegMon.cmd
MSI (s) (54:B4) [16:04:26:967]: Executing op: ComponentRegister(ComponentId={F6032DFF-042A-4288-8700-A9E06042A815},KeyPath=C:\Program Files\SplunkUniversalForwarder\etc\system\default\alert_actions.conf,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=1)
1: {D77B0D44-D35B-4BD3-A54E-89CBAE2086E6} 2: {F6032DFF-042A-4288-8700-A9E06042A815} 3: C:\Program Files\SplunkUniversalForwarder\etc\system\default\alert_actions.conf
MSI (s) (54:B4) [16:04:26:967]: Executing op: ComponentRegister(ComponentId={949A92D8-494E-4448-8321-3FEA9C9FC0F9},KeyPath=C:\Program Files\SplunkUniversalForwarder\etc\system\default\app.conf,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=1)
1: {D77B0D44-D35B-4BD3-A54E-89CBAE2086E6} 2: {949A92D8-494E-4448-8321-3FEA9C9FC0F9} 3: C:\Program Files\SplunkUniversalForwarder\etc\system\default\app.conf
MSI (s) (54:B4) [16:04:26:983]: Executing op: ComponentRegister(ComponentId={1DA41F2C-4E34-472C-AEFE-97135EF018B4},KeyPath=C:\Program Files\SplunkUniversalForwarder\etc\system\default\audit.conf,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=1)
1: {D77B0D44-D35B-4BD3-A54E-89CBAE2086E6} 2: {1DA41F2C-4E34-472C-AEFE-97135EF018B4} 3: C:\Program Files\SplunkUniversalForwarder\etc\system\default\audit.conf
MSI (s) (54:B4) [16:04:26:983]: Executing op: ComponentRegister(ComponentId={73D3487B-0142-4281-919B-4145EEFABD6B},KeyPath=C:\Program Files\SplunkUniversalForwarder\etc\system\default\authentication.conf,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=1)
1: {D77B0D44-D35B-4BD3-A54E-89CBAE2086E6} 2: {73D3487B-0142-4281-919B-4145EEFABD6B} 3: C:\Program Files\SplunkUniversalForwarder\etc\system\default\authentication.conf
MSI (s) (54:B4) [16:04:26:983]: Executing op: ComponentRegister(ComponentId={D14C478C-2FE5-4D80-B6DB-3F38583B8670},KeyPath=C:\Program Files\SplunkUniversalForwarder\etc\system\default\authorize.conf,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=1)
1: {D77B0D44-D35B-4BD3-A54E-89CBAE2086E6} 2: {D14C478C-2FE5-4D80-B6DB-3F38583B8670} 3: C:\Program Files\SplunkUniversalForwarder\etc\system\default\authorize.conf
MSI (s) (54:B4) [16:04:26:983]: Executing op: ComponentRegister(ComponentId={662C89C6-17AD-40FE-A949-5FD56DDA60FF},KeyPath=C:\Program Files\SplunkUniversalForwarder\etc\system\default\conf.conf,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=1)
1: {D77B0D44-D35B-4BD3-A54E-89CBAE2086E6} 2: {662C89C6-17AD-40FE-A949-5FD56DDA60FF} 3: C:\Program Files\SplunkUniversalForwarder\etc\system\default\conf.conf
MSI (s) (54:B4) [16:04:26:983]: Executing op: ComponentRegister(ComponentId={AE8D8033-0D1D-478C-9D84-6462F1AA0CD3},KeyPath=C:\Program Files\SplunkUniversalForwarder\etc\system\default\default-mode.conf,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=1)
1: {D77B0D44-D35B-4BD3-A54E-89CBAE2086E6} 2: {AE8D8033-0D1D-478C-9D84-6462F1AA0CD3} 3: C:\Program Files\SplunkUniversalForwarder\etc\system\default\default-mode.conf
MSI (s) (54:B4) [16:04:26:983]: Executing op: ComponentRegister(ComponentId={8CD10750-7041-4894-82CB-EB8F7FC17BD8},KeyPath=C:\Program Files\SplunkUniversalForwarder\etc\system\default\inputs.conf,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=1)
1: {D77B0D44-D35B-4BD3-A54E-89CBAE2086E6} 2: {8CD10750-7041-4894-82CB-EB8F7FC17BD8} 3: C:\Program Files\SplunkUniversalForwarder\etc\system\default\inputs.conf
MSI (s) (54:B4) [16:04:26:983]: Executing op: ComponentRegister(ComponentId={FFAA8DF7-5AAF-4A74-AAD3-7318C4D4BA2F},KeyPath=C:\Program Files\SplunkUniversalForwarder\etc\system\default\limits.conf,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=1)
1: {D77B0D44-D35B-4BD3-A54E-89CBAE2086E6} 2: {FFAA8DF7-5AAF-4A74-AAD3-7318C4D4BA2F} 3: C:\Program Files\SplunkUniversalForwarder\etc\system\default\limits.conf
MSI (s) (54:B4) [16:04:26:983]: Executing op: ComponentRegister(ComponentId={9253189C-A4DC-4799-9887-FE98D5FC7911},KeyPath=C:\Program Files\SplunkUniversalForwarder\etc\system\default\literals.conf,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=1)
1: {D77B0D44-D35B-4BD3-A54E-89CBAE2086E6} 2: {9253189C-A4DC-4799-9887-FE98D5FC7911} 3: C:\Program Files\SplunkUniversalForwarder\etc\system\default\literals.conf
MSI (s) (54:B4) [16:04:26:983]: Executing op: ComponentRegister(ComponentId={F0228B11-0BF0-4A9B-8451-7319CAA08C4E},KeyPath=C:\Program Files\SplunkUniversalForwarder\etc\system\default\outputs.conf,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=1)
1: {D77B0D44-D35B-4BD3-A54E-89CBAE2086E6} 2: {F0228B11-0BF0-4A9B-8451-7319CAA08C4E} 3: C:\Program Files\SplunkUniversalForwarder\etc\system\default\outputs.conf
MSI (s) (54:B4) [16:04:26:983]: Executing op: ComponentRegister(ComponentId={EAB56942-25D2-455D-BA3E-7AE964BAD9C1},KeyPath=C:\Program Files\SplunkUniversalForwarder\etc\system\default\procmon-filters.conf,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=1)
1: {D77B0D44-D35B-4BD3-A54E-89CBAE2086E6} 2: {EAB56942-25D2-455D-BA3E-7AE964BAD9C1} 3: C:\Program Files\SplunkUniversalForwarder\etc\system\default\procmon-filters.conf
MSI (s) (54:B4) [16:04:26:983]: Executing op: ComponentRegister(ComponentId={121B3D52-2070-46C6-AFC2-B5FE11FD92D2},KeyPath=C:\Program Files\SplunkUniversalForwarder\etc\system\default\props.conf,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=1)
1: {D77B0D44-D35B-4BD3-A54E-89CBAE2086E6} 2: {121B3D52-2070-46C6-AFC2-B5FE11FD92D2} 3: C:\Program Files\SplunkUniversalForwarder\etc\system\default\props.conf
MSI (s) (54:B4) [16:04:26:983]: Executing op: ComponentRegister(ComponentId={3909653F-BB34-4AB5-ACEC-3FC256629969},KeyPath=C:\Program Files\SplunkUniversalForwarder\etc\system\default\restmap.conf,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=1)
1: {D77B0D44-D35B-4BD3-A54E-89CBAE2086E6} 2: {3909653F-BB34-4AB5-ACEC-3FC256629969} 3: C:\Program Files\SplunkUniversalForwarder\etc\system\default\restmap.conf
MSI (s) (54:B4) [16:04:26:983]: Executing op: ComponentRegister(ComponentId={2D8165F0-8172-455A-8100-B1F94BDD4767},KeyPath=C:\Program Files\SplunkUniversalForwarder\etc\system\default\server.conf,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=1)
1: {D77B0D44-D35B-4BD3-A54E-89CBAE2086E6} 2: {2D8165F0-8172-455A-8100-B1F94BDD4767} 3: C:\Program Files\SplunkUniversalForwarder\etc\system\default\server.conf
MSI (s) (54:B4) [16:04:26:983]: Executing op: ComponentRegister(ComponentId={3B15D4D0-196F-444F-99B2-46E4C9EB9ABD},KeyPath=C:\Program Files\SplunkUniversalForwarder\etc\system\default\source-classifier.conf,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=1)
1: {D77B0D44-D35B-4BD3-A54E-89CBAE2086E6} 2: {3B15D4D0-196F-444F-99B2-46E4C9EB9ABD} 3: C:\Program Files\SplunkUniversalForwarder\etc\system\default\source-classifier.conf
MSI (s) (54:B4) [16:04:26:983]: Executing op: ComponentRegister(ComponentId={83B6AAC7-F72B-407C-BF3C-DFE4F727B2C9},KeyPath=C:\Program Files\SplunkUniversalForwarder\etc\system\default\sourcetypes.conf,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=1)
1: {D77B0D44-D35B-4BD3-A54E-89CBAE2086E6} 2: {83B6AAC7-F72B-407C-BF3C-DFE4F727B2C9} 3: C:\Program Files\SplunkUniversalForwarder\etc\system\default\sourcetypes.conf
MSI (s) (54:B4) [16:04:26:983]: Executing op: ComponentRegister(ComponentId={15861566-1FE1-4166-9F77-A9DA2E88575B},KeyPath=C:\Program Files\SplunkUniversalForwarder\etc\system\default\web.conf,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=1)
1: {D77B0D44-D35B-4BD3-A54E-89CBAE2086E6} 2: {15861566-1FE1-4166-9F77-A9DA2E88575B} 3: C:\Program Files\SplunkUniversalForwarder\etc\system\default\web.conf
MSI (s) (54:B4) [16:04:26:983]: Executing op: ComponentRegister(ComponentId={7DE368CA-4D56-4B1F-B732-6422A34A99E6},KeyPath=C:\Program Files\SplunkUniversalForwarder\etc\system\local\README,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=1)
1: {D77B0D44-D35B-4BD3-A54E-89CBAE2086E6} 2: {7DE368CA-4D56-4B1F-B732-6422A34A99E6} 3: C:\Program Files\SplunkUniversalForwarder\etc\system\local\README
MSI (s) (54:B4) [16:04:26:983]: Executing op: ComponentRegister(ComponentId={7E6DE8E6-B2A2-40A9-89AA-18F3864D218E},KeyPath=C:\Program Files\SplunkUniversalForwarder\etc\system\metadata\default.meta,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=1)
1: {D77B0D44-D35B-4BD3-A54E-89CBAE2086E6} 2: {7E6DE8E6-B2A2-40A9-89AA-18F3864D218E} 3: C:\Program Files\SplunkUniversalForwarder\etc\system\metadata\default.meta
MSI (s) (54:B4) [16:04:26:998]: Executing op: ComponentRegister(ComponentId={24C938CF-1598-471B-8DAD-8D27ABB56408},KeyPath=C:\Program Files\SplunkUniversalForwarder\etc\system\README\alert_actions.conf.example,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=1)
1: {D77B0D44-D35B-4BD3-A54E-89CBAE2086E6} 2: {24C938CF-1598-471B-8DAD-8D27ABB56408} 3: C:\Program Files\SplunkUniversalForwarder\etc\system\README\alert_actions.conf.example
MSI (s) (54:B4) [16:04:26:998]: Executing op: ComponentRegister(ComponentId={E6181469-6F05-4479-B9B7-022BB65824C6},KeyPath=C:\Program Files\SplunkUniversalForwarder\etc\system\README\alert_actions.conf.spec,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=1)
1: {D77B0D44-D35B-4BD3-A54E-89CBAE2086E6} 2: {E6181469-6F05-4479-B9B7-022BB65824C6} 3: C:\Program Files\SplunkUniversalForwarder\etc\system\README\alert_actions.conf.spec
MSI (s) (54:B4) [16:04:26:998]: Executing op: ComponentRegister(ComponentId={14BE6B71-675C-45DE-9654-10B9DD6FDA2E},KeyPath=C:\Program Files\SplunkUniversalForwarder\etc\system\README\audit.conf.example,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=1)
1: {D77B0D44-D35B-4BD3-A54E-89CBAE2086E6} 2: {14BE6B71-675C-45DE-9654-10B9DD6FDA2E} 3: C:\Program Files\SplunkUniversalForwarder\etc\system\README\audit.conf.example
MSI (s) (54:B4) [16:04:26:998]: Executing op: ComponentRegister(ComponentId={921A9346-21DC-4114-8CBF-5D874BE71C89},KeyPath=C:\Program Files\SplunkUniversalForwarder\etc\system\README\audit.conf.spec,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=1)
1: {D77B0D44-D35B-4BD3-A54E-89CBAE2086E6} 2: {921A9346-21DC-4114-8CBF-5D874BE71C89} 3: C:\Program Files\SplunkUniversalForwarder\etc\system\README\audit.conf.spec
MSI (s) (54:B4) [16:04:26:998]: Executing op: ComponentRegister(ComponentId={F40737C9-9260-478F-B727-15867EF76F05},KeyPath=C:\Program Files\SplunkUniversalForwarder\etc\system\README\authentication.conf.example,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=1)
1: {D77B0D44-D35B-4BD3-A54E-89CBAE2086E6} 2: {F40737C9-9260-478F-B727-15867EF76F05} 3: C:\Program Files\SplunkUniversalForwarder\etc\system\README\authentication.conf.example
MSI (s) (54:B4) [16:04:26:998]: Executing op: ComponentRegister(ComponentId={E2DC6E27-27BD-4706-BD0D-4CFD4E24A5E7},KeyPath=C:\Program Files\SplunkUniversalForwarder\etc\system\README\authentication.conf.spec,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=1)
1: {D77B0D44-D35B-4BD3-A54E-89CBAE2086E6} 2: {E2DC6E27-27BD-4706-BD0D-4CFD4E24A5E7} 3: C:\Program Files\SplunkUniversalForwarder\etc\system\README\authentication.conf.spec
MSI (s) (54:B4) [16:04:26:998]: Executing op: ComponentRegister(ComponentId={FD9D1D21-5D56-46B0-9C5A-90FD414095A0},KeyPath=C:\Program Files\SplunkUniversalForwarder\etc\system\README\authorize.conf.example,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=1)
1: {D77B0D44-D35B-4BD3-A54E-89CBAE2086E6} 2: {FD9D1D21-5D56-46B0-9C5A-90FD414095A0} 3: C:\Program Files\SplunkUniversalForwarder\etc\system\README\authorize.conf.example
MSI (s) (54:B4) [16:04:26:998]: Executing op: ComponentRegister(ComponentId={4EAC1DBB-C3FF-4626-AC58-3468FC3494F4},KeyPath=C:\Program Files\SplunkUniversalForwarder\etc\system\README\authorize.conf.spec,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=1)
1: {D77B0D44-D35B-4BD3-A54E-89CBAE2086E6} 2: {4EAC1DBB-C3FF-4626-AC58-3468FC3494F4} 3: C:\Program Files\SplunkUniversalForwarder\etc\system\README\authorize.conf.spec
MSI (s) (54:B4) [16:04:26:998]: Executing op: ComponentRegister(ComponentId={73A2E54B-51E9-4413-A0CA-AF9781716232},KeyPath=C:\Program Files\SplunkUniversalForwarder\etc\system\README\collections.conf.example,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=1)
1: {D77B0D44-D35B-4BD3-A54E-89CBAE2086E6} 2: {73A2E54B-51E9-4413-A0CA-AF9781716232} 3: C:\Program Files\SplunkUniversalForwarder\etc\system\README\collections.conf.example
MSI (s) (54:B4) [16:04:26:998]: Executing op: ComponentRegister(ComponentId={88C52A37-D827-4DA7-A7F6-789BA69FD710},KeyPath=C:\Program Files\SplunkUniversalForwarder\etc\system\README\collections.conf.spec,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=1)
1: {D77B0D44-D35B-4BD3-A54E-89CBAE2086E6} 2: {88C52A37-D827-4DA7-A7F6-789BA69FD710} 3: C:\Program Files\SplunkUniversalForwarder\etc\system\README\collections.conf.spec
MSI (s) (54:B4) [16:04:26:998]: Executing op: ComponentRegister(ComponentId={2247DC7B-7D92-4526-B28B-E15BBA522AB3},KeyPath=C:\Program Files\SplunkUniversalForwarder\etc\system\README\conf_checker.rules,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=1)
1: {D77B0D44-D35B-4BD3-A54E-89CBAE2086E6} 2: {2247DC7B-7D92-4526-B28B-E15BBA522AB3} 3: C:\Program Files\SplunkUniversalForwarder\etc\system\README\conf_checker.rules
MSI (s) (54:B4) [16:04:26:998]: Executing op: ComponentRegister(ComponentId={A17798DB-8049-4DB2-BE8C-BF6F17FC3B77},KeyPath=C:\Program Files\SplunkUniversalForwarder\etc\system\README\default-mode.conf.examples,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=1)
1: {D77B0D44-D35B-4BD3-A54E-89CBAE2086E6} 2: {A17798DB-8049-4DB2-BE8C-BF6F17FC3B77} 3: C:\Program Files\SplunkUniversalForwarder\etc\system\README\default-mode.conf.examples
MSI (s) (54:B4) [16:04:26:998]: Executing op: ComponentRegister(ComponentId={F0D2CAF4-9AC1-4E39-8D26-A1BFF144B2D3},KeyPath=C:\Program Files\SplunkUniversalForwarder\etc\system\README\default-mode.conf.spec,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=1)
1: {D77B0D44-D35B-4BD3-A54E-89CBAE2086E6} 2: {F0D2CAF4-9AC1-4E39-8D26-A1BFF144B2D3} 3: C:\Program Files\SplunkUniversalForwarder\etc\system\README\default-mode.conf.spec
MSI (s) (54:B4) [16:04:26:998]: Executing op: ComponentRegister(ComponentId={FD189376-2328-458F-82BD-BCC194FBF33E},KeyPath=C:\Program Files\SplunkUniversalForwarder\etc\system\README\default.meta.example,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=1)
1: {D77B0D44-D35B-4BD3-A54E-89CBAE2086E6} 2: {FD189376-2328-458F-82BD-BCC194FBF33E} 3: C:\Program Files\SplunkUniversalForwarder\etc\system\README\default.meta.example
MSI (s) (54:B4) [16:04:26:998]: Executing op: ComponentRegister(ComponentId={3DBAB8C6-FB9D-44AF-8213-E3E7491EC5F1},KeyPath=C:\Program Files\SplunkUniversalForwarder\etc\system\README\default.meta.spec,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=1)
1: {D77B0D44-D35B-4BD3-A54E-89CBAE2086E6} 2: {3DBAB8C6-FB9D-44AF-8213-E3E7491EC5F1} 3: C:\Program Files\SplunkUniversalForwarder\etc\system\README\default.meta.spec
MSI (s) (54:B4) [16:04:26:998]: Executing op: ComponentRegister(ComponentId={D8184DF8-E81B-4D04-B5D1-F7527B833769},KeyPath=C:\Program Files\SplunkUniversalForwarder\etc\system\README\inputs.conf.example,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=1)
1: {D77B0D44-D35B-4BD3-A54E-89CBAE2086E6} 2: {D8184DF8-E81B-4D04-B5D1-F7527B833769} 3: C:\Program Files\SplunkUniversalForwarder\etc\system\README\inputs.conf.example
MSI (s) (54:B4) [16:04:26:998]: Executing op: ComponentRegister(ComponentId={F08A6089-B4DA-4D26-B688-9404339A5AE8},KeyPath=C:\Program Files\SplunkUniversalForwarder\etc\system\README\inputs.conf.spec,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=1)
1: {D77B0D44-D35B-4BD3-A54E-89CBAE2086E6} 2: {F08A6089-B4DA-4D26-B688-9404339A5AE8} 3: C:\Program Files\SplunkUniversalForwarder\etc\system\README\inputs.conf.spec
MSI (s) (54:B4) [16:04:26:998]: Executing op: ComponentRegister(ComponentId={6F0E75AC-B29E-4BC3-8F47-B6C28123F207},KeyPath=C:\Program Files\SplunkUniversalForwarder\etc\system\README\instance.cfg.example,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=1)
1: {D77B0D44-D35B-4BD3-A54E-89CBAE2086E6} 2: {6F0E75AC-B29E-4BC3-8F47-B6C28123F207} 3: C:\Program Files\SplunkUniversalForwarder\etc\system\README\instance.cfg.example
MSI (s) (54:B4) [16:04:26:998]: Executing op: ComponentRegister(ComponentId={7FBBE4AA-C452-4E9D-880B-D7DF6250F3AC},KeyPath=C:\Program Files\SplunkUniversalForwarder\etc\system\README\instance.cfg.spec,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=1)
1: {D77B0D44-D35B-4BD3-A54E-89CBAE2086E6} 2: {7FBBE4AA-C452-4E9D-880B-D7DF6250F3AC} 3: C:\Program Files\SplunkUniversalForwarder\etc\system\README\instance.cfg.spec
MSI (s) (54:B4) [16:04:27:014]: Executing op: ComponentRegister(ComponentId={0D1430F8-66F0-4949-83EF-BE631068FF57},KeyPath=C:\Program Files\SplunkUniversalForwarder\etc\system\README\limits.conf.example,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=1)
1: {D77B0D44-D35B-4BD3-A54E-89CBAE2086E6} 2: {0D1430F8-66F0-4949-83EF-BE631068FF57} 3: C:\Program Files\SplunkUniversalForwarder\etc\system\README\limits.conf.example
MSI (s) (54:B4) [16:04:27:014]: Executing op: ComponentRegister(ComponentId={4A217C49-5EE9-44B5-BBA9-6CE88E761023},KeyPath=C:\Program Files\SplunkUniversalForwarder\etc\system\README\limits.conf.spec,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=1)
1: {D77B0D44-D35B-4BD3-A54E-89CBAE2086E6} 2: {4A217C49-5EE9-44B5-BBA9-6CE88E761023} 3: C:\Program Files\SplunkUniversalForwarder\etc\system\README\limits.conf.spec
MSI (s) (54:B4) [16:04:27:014]: Executing op: ComponentRegister(ComponentId={668E8A8E-E408-423F-BB2F-A831E3E23F7D},KeyPath=C:\Program Files\SplunkUniversalForwarder\etc\system\README\literals.conf.example,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=1)
1: {D77B0D44-D35B-4BD3-A54E-89CBAE2086E6} 2: {668E8A8E-E408-423F-BB2F-A831E3E23F7D} 3: C:\Program Files\SplunkUniversalForwarder\etc\system\README\literals.conf.example
MSI (s) (54:B4) [16:04:27:014]: Executing op: ComponentRegister(ComponentId={BF237E6B-3F47-47F3-9DC3-29372FB8F86F},KeyPath=C:\Program Files\SplunkUniversalForwarder\etc\system\README\literals.conf.spec,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=1)
1: {D77B0D44-D35B-4BD3-A54E-89CBAE2086E6} 2: {BF237E6B-3F47-47F3-9DC3-29372FB8F86F} 3: C:\Program Files\SplunkUniversalForwarder\etc\system\README\literals.conf.spec
MSI (s) (54:B4) [16:04:27:014]: Executing op: ComponentRegister(ComponentId={54C7C590-31A1-4876-A770-BC25622DC7C8},KeyPath=C:\Program Files\SplunkUniversalForwarder\etc\system\README\outputs.conf.example,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=1)
1: {D77B0D44-D35B-4BD3-A54E-89CBAE2086E6} 2: {54C7C590-31A1-4876-A770-BC25622DC7C8} 3: C:\Program Files\SplunkUniversalForwarder\etc\system\README\outputs.conf.example
MSI (s) (54:B4) [16:04:27:014]: Executing op: ComponentRegister(ComponentId={D41202B6-C36C-4669-854F-0DD814A1C63F},KeyPath=C:\Program Files\SplunkUniversalForwarder\etc\system\README\outputs.conf.spec,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=1)
1: {D77B0D44-D35B-4BD3-A54E-89CBAE2086E6} 2: {D41202B6-C36C-4669-854F-0DD814A1C63F} 3: C:\Program Files\SplunkUniversalForwarder\etc\system\README\outputs.conf.spec
MSI (s) (54:B4) [16:04:27:014]: Executing op: ComponentRegister(ComponentId={4984C996-2041-43F3-99F1-416E7F4952C0},KeyPath=C:\Program Files\SplunkUniversalForwarder\etc\system\README\procmon-filters.conf.example,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=1)
1: {D77B0D44-D35B-4BD3-A54E-89CBAE2086E6} 2: {4984C996-2041-43F3-99F1-416E7F4952C0} 3: C:\Program Files\SplunkUniversalForwarder\etc\system\README\procmon-filters.conf.example
MSI (s) (54:B4) [16:04:27:014]: Executing op: ComponentRegister(ComponentId={506BAF65-9F88-4A0C-B469-A96BC68DE1F8},KeyPath=C:\Program Files\SplunkUniversalForwarder\etc\system\README\procmon-filters.conf.spec,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=1)
1: {D77B0D44-D35B-4BD3-A54E-89CBAE2086E6} 2: {506BAF65-9F88-4A0C-B469-A96BC68DE1F8} 3: C:\Program Files\SplunkUniversalForwarder\etc\system\README\procmon-filters.conf.spec
MSI (s) (54:B4) [16:04:27:014]: Executing op: ComponentRegister(ComponentId={3283D22D-DE0C-48B0-BE10-7F4C65401626},KeyPath=C:\Program Files\SplunkUniversalForwarder\etc\system\README\props.conf.example,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=1)
1: {D77B0D44-D35B-4BD3-A54E-89CBAE2086E6} 2: {3283D22D-DE0C-48B0-BE10-7F4C65401626} 3: C:\Program Files\SplunkUniversalForwarder\etc\system\README\props.conf.example
MSI (s) (54:B4) [16:04:27:014]: Executing op: ComponentRegister(ComponentId={282911C2-683E-4C6E-815C-E4A283B2CABA},KeyPath=C:\Program Files\SplunkUniversalForwarder\etc\system\README\props.conf.spec,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=1)
1: {D77B0D44-D35B-4BD3-A54E-89CBAE2086E6} 2: {282911C2-683E-4C6E-815C-E4A283B2CABA} 3: C:\Program Files\SplunkUniversalForwarder\etc\system\README\props.conf.spec
MSI (s) (54:B4) [16:04:27:014]: Executing op: ComponentRegister(ComponentId={2B032938-8AE7-4A62-90CD-6533EF9C63D2},KeyPath=C:\Program Files\SplunkUniversalForwarder\etc\system\README\restmap.conf.example,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=1)
1: {D77B0D44-D35B-4BD3-A54E-89CBAE2086E6} 2: {2B032938-8AE7-4A62-90CD-6533EF9C63D2} 3: C:\Program Files\SplunkUniversalForwarder\etc\system\README\restmap.conf.example
MSI (s) (54:B4) [16:04:27:014]: Executing op: ComponentRegister(ComponentId={4B964690-3F27-46FC-97B7-40E278E9223A},KeyPath=C:\Program Files\SplunkUniversalForwarder\etc\system\README\restmap.conf.spec,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=1)
1: {D77B0D44-D35B-4BD3-A54E-89CBAE2086E6} 2: {4B964690-3F27-46FC-97B7-40E278E9223A} 3: C:\Program Files\SplunkUniversalForwarder\etc\system\README\restmap.conf.spec
MSI (s) (54:B4) [16:04:27:014]: Executing op: ComponentRegister(ComponentId={4B9C0342-C4C0-49CC-9EAF-93DD25CA5EB7},KeyPath=C:\Program Files\SplunkUniversalForwarder\etc\system\README\server.conf.example,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=1)
1: {D77B0D44-D35B-4BD3-A54E-89CBAE2086E6} 2: {4B9C0342-C4C0-49CC-9EAF-93DD25CA5EB7} 3: C:\Program Files\SplunkUniversalForwarder\etc\system\README\server.conf.example
MSI (s) (54:B4) [16:04:27:014]: Executing op: ComponentRegister(ComponentId={FCFFA3B5-6057-42B7-9DDF-94CD8F4EA1AD},KeyPath=C:\Program Files\SplunkUniversalForwarder\etc\system\README\server.conf.spec,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=1)
1: {D77B0D44-D35B-4BD3-A54E-89CBAE2086E6} 2: {FCFFA3B5-6057-42B7-9DDF-94CD8F4EA1AD} 3: C:\Program Files\SplunkUniversalForwarder\etc\system\README\server.conf.spec
MSI (s) (54:B4) [16:04:27:014]: Executing op: ComponentRegister(ComponentId={8C4C0218-0DC0-444B-BD3E-9E4FCC567DE8},KeyPath=C:\Program Files\SplunkUniversalForwarder\etc\system\README\serverclass.seed.xml.example,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=1)
1: {D77B0D44-D35B-4BD3-A54E-89CBAE2086E6} 2: {8C4C0218-0DC0-444B-BD3E-9E4FCC567DE8} 3: C:\Program Files\SplunkUniversalForwarder\etc\system\README\serverclass.seed.xml.example
MSI (s) (54:B4) [16:04:27:014]: Executing op: ComponentRegister(ComponentId={48DDA6E4-1A1E-410A-B395-00949A208314},KeyPath=C:\Program Files\SplunkUniversalForwarder\etc\system\README\source-classifier.conf.example,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=1)
1: {D77B0D44-D35B-4BD3-A54E-89CBAE2086E6} 2: {48DDA6E4-1A1E-410A-B395-00949A208314} 3: C:\Program Files\SplunkUniversalForwarder\etc\system\README\source-classifier.conf.example
MSI (s) (54:B4) [16:04:27:014]: Executing op: ComponentRegister(ComponentId={F7CEF91B-75C6-4E5C-804D-BAF4A6DBB4B6},KeyPath=C:\Program Files\SplunkUniversalForwarder\etc\system\README\source-classifier.conf.spec,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=1)
1: {D77B0D44-D35B-4BD3-A54E-89CBAE2086E6} 2: {F7CEF91B-75C6-4E5C-804D-BAF4A6DBB4B6} 3: C:\Program Files\SplunkUniversalForwarder\etc\system\README\source-classifier.conf.spec
MSI (s) (54:B4) [16:04:27:014]: Executing op: ComponentRegister(ComponentId={A8BE050B-EAEA-4984-AFB9-F88BED9352C1},KeyPath=C:\Program Files\SplunkUniversalForwarder\etc\system\README\sourcetypes.conf.example,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=1)
1: {D77B0D44-D35B-4BD3-A54E-89CBAE2086E6} 2: {A8BE050B-EAEA-4984-AFB9-F88BED9352C1} 3: C:\Program Files\SplunkUniversalForwarder\etc\system\README\sourcetypes.conf.example
MSI (s) (54:B4) [16:04:27:030]: Executing op: ComponentRegister(ComponentId={5099CEF3-F0DE-49CC-87DE-4D8B537F6BB0},KeyPath=C:\Program Files\SplunkUniversalForwarder\etc\system\README\sourcetypes.conf.spec,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=1)
1: {D77B0D44-D35B-4BD3-A54E-89CBAE2086E6} 2: {5099CEF3-F0DE-49CC-87DE-4D8B537F6BB0} 3: C:\Program Files\SplunkUniversalForwarder\etc\system\README\sourcetypes.conf.spec
MSI (s) (54:B4) [16:04:27:030]: Executing op: ComponentRegister(ComponentId={06D97409-5369-47C7-9A52-14F5D1D05D2C},KeyPath=C:\Program Files\SplunkUniversalForwarder\etc\system\README\splunk-launch.conf.spec,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=1)
1: {D77B0D44-D35B-4BD3-A54E-89CBAE2086E6} 2: {06D97409-5369-47C7-9A52-14F5D1D05D2C} 3: C:\Program Files\SplunkUniversalForwarder\etc\system\README\splunk-launch.conf.spec
MSI (s) (54:B4) [16:04:27:030]: Executing op: ComponentRegister(ComponentId={CC0F02CD-BE87-45FE-8752-E8FCDE7F6381},KeyPath=C:\Program Files\SplunkUniversalForwarder\etc\system\README\user-prefs.conf.example,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=1)
1: {D77B0D44-D35B-4BD3-A54E-89CBAE2086E6} 2: {CC0F02CD-BE87-45FE-8752-E8FCDE7F6381} 3: C:\Program Files\SplunkUniversalForwarder\etc\system\README\user-prefs.conf.example
MSI (s) (54:B4) [16:04:27:030]: Executing op: ComponentRegister(ComponentId={D6AC106B-4B27-4C29-B5B5-BAD31547E089},KeyPath=C:\Program Files\SplunkUniversalForwarder\etc\system\README\user-prefs.conf.spec,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=1)
1: {D77B0D44-D35B-4BD3-A54E-89CBAE2086E6} 2: {D6AC106B-4B27-4C29-B5B5-BAD31547E089} 3: C:\Program Files\SplunkUniversalForwarder\etc\system\README\user-prefs.conf.spec
MSI (s) (54:B4) [16:04:27:030]: Executing op: ComponentRegister(ComponentId={283EF54B-19CD-4D2C-8BB8-264483A06C2C},KeyPath=C:\Program Files\SplunkUniversalForwarder\etc\system\README\user-seed.conf.example,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=1)
1: {D77B0D44-D35B-4BD3-A54E-89CBAE2086E6} 2: {283EF54B-19CD-4D2C-8BB8-264483A06C2C} 3: C:\Program Files\SplunkUniversalForwarder\etc\system\README\user-seed.conf.example
MSI (s) (54:B4) [16:04:27:030]: Executing op: ComponentRegister(ComponentId={945A6BC1-43D3-46F2-B4AD-DB2933114A33},KeyPath=C:\Program Files\SplunkUniversalForwarder\etc\system\README\user-seed.conf.spec,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=1)
1: {D77B0D44-D35B-4BD3-A54E-89CBAE2086E6} 2: {945A6BC1-43D3-46F2-B4AD-DB2933114A33} 3: C:\Program Files\SplunkUniversalForwarder\etc\system\README\user-seed.conf.spec
MSI (s) (54:B4) [16:04:27:030]: Executing op: ComponentRegister(ComponentId={135F3BCB-2716-4729-9198-5FF7D06E8BE3},KeyPath=C:\Program Files\SplunkUniversalForwarder\etc\system\README\web.conf.example,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=1)
1: {D77B0D44-D35B-4BD3-A54E-89CBAE2086E6} 2: {135F3BCB-2716-4729-9198-5FF7D06E8BE3} 3: C:\Program Files\SplunkUniversalForwarder\etc\system\README\web.conf.example
MSI (s) (54:B4) [16:04:27:030]: Executing op: ComponentRegister(ComponentId={9DD7F214-E2B5-4933-B8C3-6578973AC782},KeyPath=C:\Program Files\SplunkUniversalForwarder\etc\system\README\web.conf.spec,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=1)
1: {D77B0D44-D35B-4BD3-A54E-89CBAE2086E6} 2: {9DD7F214-E2B5-4933-B8C3-6578973AC782} 3: C:\Program Files\SplunkUniversalForwarder\etc\system\README\web.conf.spec
MSI (s) (54:B4) [16:04:27:030]: Executing op: ComponentRegister(ComponentId={EA6EF263-5B13-485B-9C71-3BD7D773A19A},KeyPath=C:\Program Files\SplunkUniversalForwarder\etc\system\README\wmi.conf.example,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=1)
1: {D77B0D44-D35B-4BD3-A54E-89CBAE2086E6} 2: {EA6EF263-5B13-485B-9C71-3BD7D773A19A} 3: C:\Program Files\SplunkUniversalForwarder\etc\system\README\wmi.conf.example
MSI (s) (54:B4) [16:04:27:030]: Executing op: ComponentRegister(ComponentId={4F753E4F-2D68-4FE4-A35B-380A7D1A0BDF},KeyPath=C:\Program Files\SplunkUniversalForwarder\etc\system\README\wmi.conf.spec,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=1)
1: {D77B0D44-D35B-4BD3-A54E-89CBAE2086E6} 2: {4F753E4F-2D68-4FE4-A35B-380A7D1A0BDF} 3: C:\Program Files\SplunkUniversalForwarder\etc\system\README\wmi.conf.spec
MSI (s) (54:B4) [16:04:27:030]: Executing op: ComponentRegister(ComponentId={5700C319-2F96-4866-A964-93822964D68B},KeyPath=C:\Program Files\SplunkUniversalForwarder\etc\system\static\atom.xsl,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=1)
1: {D77B0D44-D35B-4BD3-A54E-89CBAE2086E6} 2: {5700C319-2F96-4866-A964-93822964D68B} 3: C:\Program Files\SplunkUniversalForwarder\etc\system\static\atom.xsl
MSI (s) (54:B4) [16:04:27:030]: Executing op: ComponentRegister(ComponentId={7A6AC965-1047-41E6-80F5-CC41FCAF97B8},KeyPath=C:\Program Files\SplunkUniversalForwarder\etc\system\static\splunkrc_cmds.xml,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=1)
1: {D77B0D44-D35B-4BD3-A54E-89CBAE2086E6} 2: {7A6AC965-1047-41E6-80F5-CC41FCAF97B8} 3: C:\Program Files\SplunkUniversalForwarder\etc\system\static\splunkrc_cmds.xml
MSI (s) (54:B4) [16:04:27:030]: Executing op: ComponentRegister(ComponentId={90E11881-B0E2-4C7D-BB1F-9CC5CA611804},KeyPath=C:\Program Files\SplunkUniversalForwarder\lib\copyright.txt,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=1)
1: {D77B0D44-D35B-4BD3-A54E-89CBAE2086E6} 2: {90E11881-B0E2-4C7D-BB1F-9CC5CA611804} 3: C:\Program Files\SplunkUniversalForwarder\lib\copyright.txt
MSI (s) (54:B4) [16:04:27:030]: Executing op: ComponentRegister(ComponentId={9E4D8F12-D7A5-4D28-B7DA-9A785CAC32F0},KeyPath=C:\Program Files\SplunkUniversalForwarder\share\copyright.txt,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=1)
1: {D77B0D44-D35B-4BD3-A54E-89CBAE2086E6} 2: {9E4D8F12-D7A5-4D28-B7DA-9A785CAC32F0} 3: C:\Program Files\SplunkUniversalForwarder\share\copyright.txt
MSI (s) (54:B4) [16:04:27:030]: Executing op: ComponentRegister(ComponentId={2BE6AA40-2D07-46C5-B569-77B2C1BC6122},KeyPath=C:\Program Files\SplunkUniversalForwarder\share\splunk\splunk-add-on-for-microsoft-windows_472.tgz,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=1)
1: {D77B0D44-D35B-4BD3-A54E-89CBAE2086E6} 2: {2BE6AA40-2D07-46C5-B569-77B2C1BC6122} 3: C:\Program Files\SplunkUniversalForwarder\share\splunk\splunk-add-on-for-microsoft-windows_472.tgz
MSI (s) (54:B4) [16:04:27:030]: Executing op: ComponentRegister(ComponentId={DBDB1A77-B0AC-4AB6-9CF8-DE8F26B6C73C},KeyPath=C:\Program Files\SplunkUniversalForwarder\share\splunk\zoneinfo.tzpack,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=1)
1: {D77B0D44-D35B-4BD3-A54E-89CBAE2086E6} 2: {DBDB1A77-B0AC-4AB6-9CF8-DE8F26B6C73C} 3: C:\Program Files\SplunkUniversalForwarder\share\splunk\zoneinfo.tzpack
MSI (s) (54:B4) [16:04:27:030]: Executing op: ComponentRegister(ComponentId={DF900B94-590E-46E6-A486-8AB376BB4010},KeyPath=C:\Program Files\SplunkUniversalForwarder\share\splunk\3rdparty\Copyright-for-libarchive-3.1.2.txt,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=1)
1: {D77B0D44-D35B-4BD3-A54E-89CBAE2086E6} 2: {DF900B94-590E-46E6-A486-8AB376BB4010} 3: C:\Program Files\SplunkUniversalForwarder\share\splunk\3rdparty\Copyright-for-libarchive-3.1.2.txt
MSI (s) (54:B4) [16:04:27:045]: Executing op: ComponentRegister(ComponentId={D2D072B4-E952-4FE4-8B01-1FFB4E81817B},KeyPath=C:\Program Files\SplunkUniversalForwarder\share\splunk\3rdparty\Copyright-for-libxml2-2.9.1.txt,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=1)
1: {D77B0D44-D35B-4BD3-A54E-89CBAE2086E6} 2: {D2D072B4-E952-4FE4-8B01-1FFB4E81817B} 3: C:\Program Files\SplunkUniversalForwarder\share\splunk\3rdparty\Copyright-for-libxml2-2.9.1.txt
MSI (s) (54:B4) [16:04:27:045]: Executing op: ComponentRegister(ComponentId={8F2C126D-C131-4123-94FF-2D2A58C1CAAF},KeyPath=C:\Program Files\SplunkUniversalForwarder\share\splunk\3rdparty\Copyright-for-libxslt-1.1.28.txt,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=1)
1: {D77B0D44-D35B-4BD3-A54E-89CBAE2086E6} 2: {8F2C126D-C131-4123-94FF-2D2A58C1CAAF} 3: C:\Program Files\SplunkUniversalForwarder\share\splunk\3rdparty\Copyright-for-libxslt-1.1.28.txt
MSI (s) (54:B4) [16:04:27:045]: Executing op: ComponentRegister(ComponentId={4EB368CA-DF28-4B12-997C-CF2427D2CA66},KeyPath=C:\Program Files\SplunkUniversalForwarder\share\splunk\3rdparty\Copyright-for-minihook.txt,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=1)
1: {D77B0D44-D35B-4BD3-A54E-89CBAE2086E6} 2: {4EB368CA-DF28-4B12-997C-CF2427D2CA66} 3: C:\Program Files\SplunkUniversalForwarder\share\splunk\3rdparty\Copyright-for-minihook.txt
MSI (s) (54:B4) [16:04:27:045]: Executing op: ComponentRegister(ComponentId={E9EC1DE4-C4E0-4846-9E8D-991E8420619F},KeyPath=C:\Program Files\SplunkUniversalForwarder\share\splunk\3rdparty\Copyright-for-nedmalloc.txt,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=1)
1: {D77B0D44-D35B-4BD3-A54E-89CBAE2086E6} 2: {E9EC1DE4-C4E0-4846-9E8D-991E8420619F} 3: C:\Program Files\SplunkUniversalForwarder\share\splunk\3rdparty\Copyright-for-nedmalloc.txt
MSI (s) (54:B4) [16:04:27:045]: Executing op: ComponentRegister(ComponentId={6F316B98-F42F-42E6-AD62-CA6F59EA5768},KeyPath=C:\Program Files\SplunkUniversalForwarder\share\splunk\3rdparty\Copyright-for-openldap-2.4.35.txt,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=1)
1: {D77B0D44-D35B-4BD3-A54E-89CBAE2086E6} 2: {6F316B98-F42F-42E6-AD62-CA6F59EA5768} 3: C:\Program Files\SplunkUniversalForwarder\share\splunk\3rdparty\Copyright-for-openldap-2.4.35.txt
MSI (s) (54:B4) [16:04:27:045]: Executing op: ComponentRegister(ComponentId={914E5980-9333-43D1-8852-70485B15BCAA},KeyPath=C:\Program Files\SplunkUniversalForwarder\share\splunk\3rdparty\Copyright-for-openssl-1.0.1k.txt,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=1)
1: {D77B0D44-D35B-4BD3-A54E-89CBAE2086E6} 2: {914E5980-9333-43D1-8852-70485B15BCAA} 3: C:\Program Files\SplunkUniversalForwarder\share\splunk\3rdparty\Copyright-for-openssl-1.0.1k.txt
MSI (s) (54:B4) [16:04:27:045]: Executing op: ComponentRegister(ComponentId={07F7EE91-CD0A-443F-82CC-24A662A42BDA},KeyPath=C:\Program Files\SplunkUniversalForwarder\share\splunk\3rdparty\Copyright-for-pcre-8.33.txt,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=1)
1: {D77B0D44-D35B-4BD3-A54E-89CBAE2086E6} 2: {07F7EE91-CD0A-443F-82CC-24A662A42BDA} 3: C:\Program Files\SplunkUniversalForwarder\share\splunk\3rdparty\Copyright-for-pcre-8.33.txt
MSI (s) (54:B4) [16:04:27:045]: Executing op: ComponentRegister(ComponentId={3C304738-157A-4819-8CE3-47EEE2501418},KeyPath=C:\Program Files\SplunkUniversalForwarder\share\splunk\3rdparty\Copyright-for-srm-1.2.11.txt,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=1)
1: {D77B0D44-D35B-4BD3-A54E-89CBAE2086E6} 2: {3C304738-157A-4819-8CE3-47EEE2501418} 3: C:\Program Files\SplunkUniversalForwarder\share\splunk\3rdparty\Copyright-for-srm-1.2.11.txt
MSI (s) (54:B4) [16:04:27:045]: Executing op: ActionStart(Name=InstallFiles,Description=Copying new files,Template=File: [1], Directory: [9], Size: [6])
Action 16:04:27: InstallFiles. Copying new files
MSI (s) (54:B4) [16:04:27:045]: Executing op: ProgressTotal(Total=149499413,Type=0,ByteEquivalent=1)
MSI (s) (54:B4) [16:04:27:045]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\bin\)
MSI (s) (54:B4) [16:04:27:045]: Executing op: SetSourceFolder(Folder=1\w89duo8g\bin\|SplunkUniversalForwarder\bin\)
MSI (s) (54:B4) [16:04:27:045]: Executing op: ChangeMedia(,MediaPrompt=Please insert the disk: ,MediaCabinet=uf.cab,BytesPerTick=65536,CopierType=2,ModuleFileName=C:\Windows\Installer\2a7a5cfb.msi,,,,,IsFirstPhysicalMedia=1)
MSI (s) (54:B4) [16:04:27:045]: Executing op: FileCopy(SourceName=splunkd.exe,SourceCabKey=fil008C5C4B1FBADAB37F7AB8AA426EE2DA,DestName=splunkd.exe,Attributes=512,FileSize=30435048,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=1538.512.0.58998,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (54:B4) [16:04:27:045]: File: C:\Program Files\SplunkUniversalForwarder\bin\splunkd.exe; To be installed; Won't patch; No existing file
MSI (s) (54:B4) [16:04:27:045]: Source for file 'fil008C5C4B1FBADAB37F7AB8AA426EE2DA' is compressed
InstallFiles: File: splunkd.exe, Directory: C:\Program Files\SplunkUniversalForwarder\bin\, Size: 30435048
MSI (s) (54:B4) [16:04:27:264]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\etc\system\static\)
MSI (s) (54:B4) [16:04:27:264]: Executing op: SetSourceFolder(Folder=1\w89duo8g\etc\system\static\|SplunkUniversalForwarder\etc\system\static\)
MSI (s) (54:B4) [16:04:27:264]: Executing op: FileCopy(SourceName=atom.xsl,SourceCabKey=fil01A0BE78B4F4F91F2C2FBC989D6D4E51,DestName=atom.xsl,Attributes=512,FileSize=8638,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=1532287766,HashPart2=172614031,HashPart3=605181298,HashPart4=1854336570,,)
MSI (s) (54:B4) [16:04:27:264]: File: C:\Program Files\SplunkUniversalForwarder\etc\system\static\atom.xsl; To be installed; Won't patch; No existing file
MSI (s) (54:B4) [16:04:27:264]: Source for file 'fil01A0BE78B4F4F91F2C2FBC989D6D4E51' is compressed
InstallFiles: File: atom.xsl, Directory: C:\Program Files\SplunkUniversalForwarder\etc\system\static\, Size: 8638
MSI (s) (54:B4) [16:04:27:264]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\bin\)
MSI (s) (54:B4) [16:04:27:264]: Executing op: SetSourceFolder(Folder=1\w89duo8g\bin\|SplunkUniversalForwarder\bin\)
MSI (s) (54:B4) [16:04:27:264]: Executing op: FileCopy(SourceName=libexslt.dll,SourceCabKey=fil02E0233267C642151062CED0A5254DF0,DestName=libexslt.dll,Attributes=512,FileSize=82152,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=-754758552,HashPart2=1343199347,HashPart3=-1104217845,HashPart4=2083368842,,)
MSI (s) (54:B4) [16:04:27:264]: File: C:\Program Files\SplunkUniversalForwarder\bin\libexslt.dll; To be installed; Won't patch; No existing file
MSI (s) (54:B4) [16:04:27:264]: Source for file 'fil02E0233267C642151062CED0A5254DF0' is compressed
InstallFiles: File: libexslt.dll, Directory: C:\Program Files\SplunkUniversalForwarder\bin\, Size: 82152
MSI (s) (54:B4) [16:04:27:264]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\etc\)
MSI (s) (54:B4) [16:04:27:264]: Executing op: SetSourceFolder(Folder=1\w89duo8g\etc\|SplunkUniversalForwarder\etc\)
MSI (s) (54:B4) [16:04:27:264]: Executing op: FileCopy(SourceName=bz9jzgnq.cfg|log-cmdline-debug.cfg,SourceCabKey=fil032EE721C3538F42D15D8C3B2742A80A,DestName=log-cmdline-debug.cfg,Attributes=512,FileSize=265,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=1834083414,HashPart2=722603285,HashPart3=1683857824,HashPart4=1366399743,,)
MSI (s) (54:B4) [16:04:27:280]: File: C:\Program Files\SplunkUniversalForwarder\etc\log-cmdline-debug.cfg; To be installed; Won't patch; No existing file
MSI (s) (54:B4) [16:04:27:280]: Source for file 'fil032EE721C3538F42D15D8C3B2742A80A' is compressed
InstallFiles: File: log-cmdline-debug.cfg, Directory: C:\Program Files\SplunkUniversalForwarder\etc\, Size: 265
MSI (s) (54:B4) [16:04:27:280]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\bin\)
MSI (s) (54:B4) [16:04:27:280]: Executing op: SetSourceFolder(Folder=1\w89duo8g\bin\|SplunkUniversalForwarder\bin\)
MSI (s) (54:B4) [16:04:27:280]: Executing op: FileCopy(SourceName=g3ze2irv.exe|splunk-admon.exe,SourceCabKey=fil0378B508F9B6EE1A009F9830F26EA35A,DestName=splunk-admon.exe,Attributes=512,FileSize=12028648,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=1538.512.0.58998,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (54:B4) [16:04:27:280]: File: C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe; To be installed; Won't patch; No existing file
MSI (s) (54:B4) [16:04:27:280]: Source for file 'fil0378B508F9B6EE1A009F9830F26EA35A' is compressed
InstallFiles: File: splunk-admon.exe, Directory: C:\Program Files\SplunkUniversalForwarder\bin\, Size: 12028648
MSI (s) (54:B4) [16:04:27:358]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\etc\auth\)
MSI (s) (54:B4) [16:04:27:358]: Executing op: SetSourceFolder(Folder=1\w89duo8g\etc\auth\|SplunkUniversalForwarder\etc\auth\)
MSI (s) (54:B4) [16:04:27:358]: Executing op: FileCopy(SourceName=qe4pvdjb.def|ca.pem.default,SourceCabKey=fil06949EF52111D99C9F3569A5D6FDA2E2,DestName=ca.pem.default,Attributes=512,FileSize=1860,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=-1678244094,HashPart2=518022374,HashPart3=392854870,HashPart4=112963485,,)
MSI (s) (54:B4) [16:04:27:358]: File: C:\Program Files\SplunkUniversalForwarder\etc\auth\ca.pem.default; To be installed; Won't patch; No existing file
MSI (s) (54:B4) [16:04:27:358]: Source for file 'fil06949EF52111D99C9F3569A5D6FDA2E2' is compressed
InstallFiles: File: ca.pem.default, Directory: C:\Program Files\SplunkUniversalForwarder\etc\auth\, Size: 1860
MSI (s) (54:B4) [16:04:27:358]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\etc\apps\SplunkUniversalForwarder\default\)
MSI (s) (54:B4) [16:04:27:358]: Executing op: SetSourceFolder(Folder=1\w89duo8g\etc\apps\0k4ci1p3\default\|SplunkUniversalForwarder\etc\apps\SplunkUniversalForwarder\default\)
MSI (s) (54:B4) [16:04:27:358]: Executing op: FileCopy(SourceName=pu_4d7ax.con|limits.conf,SourceCabKey=fil0741C5417EF4936E21491AA1B9327F73,DestName=limits.conf,Attributes=512,FileSize=48,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=221492880,HashPart2=-1044791474,HashPart3=-603920273,HashPart4=-88955593,,)
MSI (s) (54:B4) [16:04:27:358]: File: C:\Program Files\SplunkUniversalForwarder\etc\apps\SplunkUniversalForwarder\default\limits.conf; To be installed; Won't patch; No existing file
MSI (s) (54:B4) [16:04:27:358]: Source for file 'fil0741C5417EF4936E21491AA1B9327F73' is compressed
InstallFiles: File: limits.conf, Directory: C:\Program Files\SplunkUniversalForwarder\etc\apps\SplunkUniversalForwarder\default\, Size: 48
MSI (s) (54:B4) [16:04:27:358]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\bin\)
MSI (s) (54:B4) [16:04:27:358]: Executing op: SetSourceFolder(Folder=1\w89duo8g\bin\|SplunkUniversalForwarder\bin\)
MSI (s) (54:B4) [16:04:27:358]: Executing op: FileCopy(SourceName=bxzxzj1y.inf|SplunkMonitorNoHandledrv-win8.inf,SourceCabKey=fil0748A0E38378D7C2E9972FD4FDFBB05C,DestName=SplunkMonitorNoHandledrv-win8.inf,Attributes=512,FileSize=3575,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=1588189652,HashPart2=667105620,HashPart3=630057202,HashPart4=-526960550,,)
MSI (s) (54:B4) [16:04:27:373]: File: C:\Program Files\SplunkUniversalForwarder\bin\SplunkMonitorNoHandledrv-win8.inf; To be installed; Won't patch; No existing file
MSI (s) (54:B4) [16:04:27:373]: Source for file 'fil0748A0E38378D7C2E9972FD4FDFBB05C' is compressed
InstallFiles: File: SplunkMonitorNoHandledrv-win8.inf, Directory: C:\Program Files\SplunkUniversalForwarder\bin\, Size: 3575
MSI (s) (54:B4) [16:04:27:373]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\share\)
MSI (s) (54:B4) [16:04:27:373]: Executing op: SetSourceFolder(Folder=1\w89duo8g\share\|SplunkUniversalForwarder\share\)
MSI (s) (54:B4) [16:04:27:373]: Executing op: FileCopy(SourceName=whtzl09b.txt|copyright.txt,SourceCabKey=fil0AA2474594CE4BE76BEA66647F68CBD1,DestName=copyright.txt,Attributes=512,FileSize=58,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=-869762882,HashPart2=1582527905,HashPart3=1827730478,HashPart4=-420082666,,)
MSI (s) (54:B4) [16:04:27:373]: File: C:\Program Files\SplunkUniversalForwarder\share\copyright.txt; To be installed; Won't patch; No existing file
MSI (s) (54:B4) [16:04:27:373]: Source for file 'fil0AA2474594CE4BE76BEA66647F68CBD1' is compressed
InstallFiles: File: copyright.txt, Directory: C:\Program Files\SplunkUniversalForwarder\share\, Size: 58
MSI (s) (54:B4) [16:04:27:373]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\bin\scripts\)
MSI (s) (54:B4) [16:04:27:373]: Executing op: SetSourceFolder(Folder=1\w89duo8g\bin\scripts\|SplunkUniversalForwarder\bin\scripts\)
MSI (s) (54:B4) [16:04:27:373]: Executing op: FileCopy(SourceName=pamyrhlu.pat|splunk-wmi.path,SourceCabKey=fil0CD888D65A36713C75D84323A5EBE74F,DestName=splunk-wmi.path,Attributes=512,FileSize=33,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=-616834441,HashPart2=774532735,HashPart3=-576435331,HashPart4=-270913166,,)
MSI (s) (54:B4) [16:04:27:373]: File: C:\Program Files\SplunkUniversalForwarder\bin\scripts\splunk-wmi.path; To be installed; Won't patch; No existing file
MSI (s) (54:B4) [16:04:27:373]: Source for file 'fil0CD888D65A36713C75D84323A5EBE74F' is compressed
InstallFiles: File: splunk-wmi.path, Directory: C:\Program Files\SplunkUniversalForwarder\bin\scripts\, Size: 33
MSI (s) (54:B4) [16:04:27:373]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\bin\)
MSI (s) (54:B4) [16:04:27:373]: Executing op: SetSourceFolder(Folder=1\w89duo8g\bin\|SplunkUniversalForwarder\bin\)
MSI (s) (54:B4) [16:04:27:373]: Executing op: FileCopy(SourceName=rgfp_rm-.cat|SplunkMonitorNoHandledrv-win7.cat,SourceCabKey=fil0CF839043F9618C53CEE04DD6FC57691,DestName=SplunkMonitorNoHandledrv-win7.cat,Attributes=512,FileSize=6297,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=-758879332,HashPart2=-684380611,HashPart3=1503414496,HashPart4=-212399436,,)
MSI (s) (54:B4) [16:04:27:373]: File: C:\Program Files\SplunkUniversalForwarder\bin\SplunkMonitorNoHandledrv-win7.cat; To be installed; Won't patch; No existing file
MSI (s) (54:B4) [16:04:27:373]: Source for file 'fil0CF839043F9618C53CEE04DD6FC57691' is compressed
InstallFiles: File: SplunkMonitorNoHandledrv-win7.cat, Directory: C:\Program Files\SplunkUniversalForwarder\bin\, Size: 6297
MSI (s) (54:B4) [16:04:27:373]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\etc\)
MSI (s) (54:B4) [16:04:27:373]: Executing op: SetSourceFolder(Folder=1\w89duo8g\etc\|SplunkUniversalForwarder\etc\)
MSI (s) (54:B4) [16:04:27:373]: Executing op: FileCopy(SourceName=wzmtzclc.xsl|prettyprint.xsl,SourceCabKey=fil0ED0AE0D5B2285D12CBAF87095D62D61,DestName=prettyprint.xsl,Attributes=512,FileSize=1890,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=819247607,HashPart2=749490956,HashPart3=522737567,HashPart4=1776920689,,)
MSI (s) (54:B4) [16:04:27:373]: File: C:\Program Files\SplunkUniversalForwarder\etc\prettyprint.xsl; To be installed; Won't patch; No existing file
MSI (s) (54:B4) [16:04:27:373]: Source for file 'fil0ED0AE0D5B2285D12CBAF87095D62D61' is compressed
InstallFiles: File: prettyprint.xsl, Directory: C:\Program Files\SplunkUniversalForwarder\etc\, Size: 1890
MSI (s) (54:B4) [16:04:27:373]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\etc\system\default\)
MSI (s) (54:B4) [16:04:27:373]: Executing op: SetSourceFolder(Folder=1\w89duo8g\etc\system\default\|SplunkUniversalForwarder\etc\system\default\)
MSI (s) (54:B4) [16:04:27:373]: Executing op: FileCopy(SourceName=pfm2krib.con|outputs.conf,SourceCabKey=fil0F27C27631E6A3F52619A428F6463F53,DestName=outputs.conf,Attributes=512,FileSize=1206,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=888218089,HashPart2=1228141109,HashPart3=729689088,HashPart4=-1056515619,,)
MSI (s) (54:B4) [16:04:27:373]: File: C:\Program Files\SplunkUniversalForwarder\etc\system\default\outputs.conf; To be installed; Won't patch; No existing file
MSI (s) (54:B4) [16:04:27:373]: Source for file 'fil0F27C27631E6A3F52619A428F6463F53' is compressed
InstallFiles: File: outputs.conf, Directory: C:\Program Files\SplunkUniversalForwarder\etc\system\default\, Size: 1206
MSI (s) (54:B4) [16:04:27:373]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\bin\)
MSI (s) (54:B4) [16:04:27:373]: Executing op: SetSourceFolder(Folder=1\w89duo8g\bin\|SplunkUniversalForwarder\bin\)
MSI (s) (54:B4) [16:04:27:373]: Executing op: FileCopy(SourceName=dntxi8ix.exe|splunk-winevtlog.exe,SourceCabKey=fil11304BE3D74939887604160CC0F6DD11,DestName=splunk-winevtlog.exe,Attributes=512,FileSize=12157160,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=1538.512.0.58998,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (54:B4) [16:04:27:373]: File: C:\Program Files\SplunkUniversalForwarder\bin\splunk-winevtlog.exe; To be installed; Won't patch; No existing file
MSI (s) (54:B4) [16:04:27:373]: Source for file 'fil11304BE3D74939887604160CC0F6DD11' is compressed
InstallFiles: File: splunk-winevtlog.exe, Directory: C:\Program Files\SplunkUniversalForwarder\bin\, Size: 12157160
MSI (s) (54:B4) [16:04:27:467]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\etc\system\README\)
MSI (s) (54:B4) [16:04:27:467]: Executing op: SetSourceFolder(Folder=1\w89duo8g\etc\system\README\|SplunkUniversalForwarder\etc\system\README\)
MSI (s) (54:B4) [16:04:27:467]: Executing op: FileCopy(SourceName=xhrmtzqc.exa|instance.cfg.example,SourceCabKey=fil13E76F62F5ABD79629E8EA5252CFCFFD,DestName=instance.cfg.example,Attributes=512,FileSize=255,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=-2097887593,HashPart2=-815526195,HashPart3=1731537424,HashPart4=1576916472,,)
MSI (s) (54:B4) [16:04:27:467]: File: C:\Program Files\SplunkUniversalForwarder\etc\system\README\instance.cfg.example; To be installed; Won't patch; No existing file
MSI (s) (54:B4) [16:04:27:467]: Source for file 'fil13E76F62F5ABD79629E8EA5252CFCFFD' is compressed
InstallFiles: File: instance.cfg.example, Directory: C:\Program Files\SplunkUniversalForwarder\etc\system\README\, Size: 255
MSI (s) (54:B4) [16:04:27:467]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\etc\system\bin\)
MSI (s) (54:B4) [16:04:27:467]: Executing op: SetSourceFolder(Folder=1\w89duo8g\etc\system\bin\|SplunkUniversalForwarder\etc\system\bin\)
MSI (s) (54:B4) [16:04:27:467]: Executing op: FileCopy(SourceName=2v-ekfpp.cmd|winEventLog.cmd,SourceCabKey=fil13F2EB7BC95E1C65B80AC028F552B5A5,DestName=winEventLog.cmd,Attributes=512,FileSize=8511,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=2067152537,HashPart2=-81623301,HashPart3=-610862348,HashPart4=-1325293789,,)
MSI (s) (54:B4) [16:04:27:467]: File: C:\Program Files\SplunkUniversalForwarder\etc\system\bin\winEventLog.cmd; To be installed; Won't patch; No existing file
MSI (s) (54:B4) [16:04:27:467]: Source for file 'fil13F2EB7BC95E1C65B80AC028F552B5A5' is compressed
InstallFiles: File: winEventLog.cmd, Directory: C:\Program Files\SplunkUniversalForwarder\etc\system\bin\, Size: 8511
MSI (s) (54:B4) [16:04:27:467]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\etc\modules\parsing\)
MSI (s) (54:B4) [16:04:27:467]: Executing op: SetSourceFolder(Folder=1\w89duo8g\etc\modules\parsing\|SplunkUniversalForwarder\etc\modules\parsing\)
MSI (s) (54:B4) [16:04:27:467]: Executing op: FileCopy(SourceName=config.xml,SourceCabKey=fil16BE0931A9744D5C566346C5478B1445,DestName=config.xml,Attributes=512,FileSize=4059,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=-1629926617,HashPart2=-242985594,HashPart3=-426674846,HashPart4=-1131859575,,)
MSI (s) (54:B4) [16:04:27:467]: File: C:\Program Files\SplunkUniversalForwarder\etc\modules\parsing\config.xml; To be installed; Won't patch; No existing file
MSI (s) (54:B4) [16:04:27:467]: Source for file 'fil16BE0931A9744D5C566346C5478B1445' is compressed
InstallFiles: File: config.xml, Directory: C:\Program Files\SplunkUniversalForwarder\etc\modules\parsing\, Size: 4059
MSI (s) (54:B4) [16:04:27:467]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\bin\)
MSI (s) (54:B4) [16:04:27:467]: Executing op: SetSourceFolder(Folder=1\w89duo8g\bin\|SplunkUniversalForwarder\bin\)
MSI (s) (54:B4) [16:04:27:467]: Executing op: FileCopy(SourceName=aadcegqx.exe|splunk-perfmon.exe,SourceCabKey=fil19C8C29C7E69B307883DFAD34C83CEB8,DestName=splunk-perfmon.exe,Attributes=512,FileSize=11935464,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=1538.512.0.58998,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (54:B4) [16:04:27:467]: File: C:\Program Files\SplunkUniversalForwarder\bin\splunk-perfmon.exe; To be installed; Won't patch; No existing file
MSI (s) (54:B4) [16:04:27:467]: Source for file 'fil19C8C29C7E69B307883DFAD34C83CEB8' is compressed
InstallFiles: File: splunk-perfmon.exe, Directory: C:\Program Files\SplunkUniversalForwarder\bin\, Size: 11935464
MSI (s) (54:B4) [16:04:27:561]: Executing op: FileCopy(SourceName=libxslt.dll,SourceCabKey=fil1A967A18D186B002E338F67AC612D25B,DestName=libxslt.dll,Attributes=512,FileSize=229096,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=-1820057869,HashPart2=-1120633270,HashPart3=-11065321,HashPart4=-466213649,,)
MSI (s) (54:B4) [16:04:27:561]: File: C:\Program Files\SplunkUniversalForwarder\bin\libxslt.dll; To be installed; Won't patch; No existing file
MSI (s) (54:B4) [16:04:27:561]: Source for file 'fil1A967A18D186B002E338F67AC612D25B' is compressed
InstallFiles: File: libxslt.dll, Directory: C:\Program Files\SplunkUniversalForwarder\bin\, Size: 229096
MSI (s) (54:B4) [16:04:27:561]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\etc\system\README\)
MSI (s) (54:B4) [16:04:27:561]: Executing op: SetSourceFolder(Folder=1\w89duo8g\etc\system\README\|SplunkUniversalForwarder\etc\system\README\)
MSI (s) (54:B4) [16:04:27:561]: Executing op: FileCopy(SourceName=4efbocy0.spe|instance.cfg.spec,SourceCabKey=fil1D2D282FF3104EF53812DB2CCADA99AC,DestName=instance.cfg.spec,Attributes=512,FileSize=1964,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=783405290,HashPart2=-332784836,HashPart3=1380309721,HashPart4=-866185056,,)
MSI (s) (54:B4) [16:04:27:561]: File: C:\Program Files\SplunkUniversalForwarder\etc\system\README\instance.cfg.spec; To be installed; Won't patch; No existing file
MSI (s) (54:B4) [16:04:27:561]: Source for file 'fil1D2D282FF3104EF53812DB2CCADA99AC' is compressed
InstallFiles: File: instance.cfg.spec, Directory: C:\Program Files\SplunkUniversalForwarder\etc\system\README\, Size: 1964
MSI (s) (54:B4) [16:04:27:561]: Executing op: FileCopy(SourceName=_86jzzb8.spe|sourcetypes.conf.spec,SourceCabKey=fil1D7539E18B97867C88DFFE021DFA0F56,DestName=sourcetypes.conf.spec,Attributes=512,FileSize=1620,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=1455574794,HashPart2=-1144026008,HashPart3=-1070694993,HashPart4=-254816104,,)
MSI (s) (54:B4) [16:04:27:561]: File: C:\Program Files\SplunkUniversalForwarder\etc\system\README\sourcetypes.conf.spec; To be installed; Won't patch; No existing file
MSI (s) (54:B4) [16:04:27:561]: Source for file 'fil1D7539E18B97867C88DFFE021DFA0F56' is compressed
InstallFiles: File: sourcetypes.conf.spec, Directory: C:\Program Files\SplunkUniversalForwarder\etc\system\README\, Size: 1620
MSI (s) (54:B4) [16:04:27:561]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\etc\apps\introspection_generator_addon\default\)
MSI (s) (54:B4) [16:04:27:561]: Executing op: SetSourceFolder(Folder=1\w89duo8g\etc\apps\5ei81amz\default\|SplunkUniversalForwarder\etc\apps\introspection_generator_addon\default\)
MSI (s) (54:B4) [16:04:27:561]: Executing op: FileCopy(SourceName=README,SourceCabKey=fil1F8E02989714854A3057ACB50933780F,DestName=README,Attributes=512,FileSize=705,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=-1622496089,HashPart2=-1542111383,HashPart3=1240067207,HashPart4=108942244,,)
MSI (s) (54:B4) [16:04:27:561]: File: C:\Program Files\SplunkUniversalForwarder\etc\apps\introspection_generator_addon\default\README; To be installed; Won't patch; No existing file
MSI (s) (54:B4) [16:04:27:561]: Source for file 'fil1F8E02989714854A3057ACB50933780F' is compressed
InstallFiles: File: README, Directory: C:\Program Files\SplunkUniversalForwarder\etc\apps\introspection_generator_addon\default\, Size: 705
MSI (s) (54:B4) [16:04:27:561]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\bin\)
MSI (s) (54:B4) [16:04:27:561]: Executing op: SetSourceFolder(Folder=1\w89duo8g\bin\|SplunkUniversalForwarder\bin\)
MSI (s) (54:B4) [16:04:27:561]: Executing op: FileCopy(SourceName=rljzwyg5.inf|splunkdrv-win6.inf,SourceCabKey=fil20E1B8325CC241CC5C79A5E5BF2F9D72,DestName=splunkdrv-win6.inf,Attributes=512,FileSize=1384,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=1484560327,HashPart2=-1920769969,HashPart3=-249199552,HashPart4=1579481472,,)
MSI (s) (54:B4) [16:04:27:561]: File: C:\Program Files\SplunkUniversalForwarder\bin\splunkdrv-win6.inf; To be installed; Won't patch; No existing file
MSI (s) (54:B4) [16:04:27:561]: Source for file 'fil20E1B8325CC241CC5C79A5E5BF2F9D72' is compressed
InstallFiles: File: splunkdrv-win6.inf, Directory: C:\Program Files\SplunkUniversalForwarder\bin\, Size: 1384
MSI (s) (54:B4) [16:04:27:561]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\etc\system\README\)
MSI (s) (54:B4) [16:04:27:561]: Executing op: SetSourceFolder(Folder=1\w89duo8g\etc\system\README\|SplunkUniversalForwarder\etc\system\README\)
MSI (s) (54:B4) [16:04:27:561]: Executing op: FileCopy(SourceName=yr9v4phc.spe|authentication.conf.spec,SourceCabKey=fil2293C306D9D8BFAF03102379D3B62DA4,DestName=authentication.conf.spec,Attributes=512,FileSize=15042,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=-1847418407,HashPart2=-1865562760,HashPart3=-1891145808,HashPart4=1638320259,,)
MSI (s) (54:B4) [16:04:27:561]: File: C:\Program Files\SplunkUniversalForwarder\etc\system\README\authentication.conf.spec; To be installed; Won't patch; No existing file
MSI (s) (54:B4) [16:04:27:561]: Source for file 'fil2293C306D9D8BFAF03102379D3B62DA4' is compressed
InstallFiles: File: authentication.conf.spec, Directory: C:\Program Files\SplunkUniversalForwarder\etc\system\README\, Size: 15042
MSI (s) (54:B4) [16:04:27:576]: Executing op: FileCopy(SourceName=aehim2tn.exa|limits.conf.example,SourceCabKey=fil22BAD424E9CF650ED1C306E097600EF0,DestName=limits.conf.example,Attributes=512,FileSize=2515,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=2083480163,HashPart2=-1657877459,HashPart3=1043287217,HashPart4=-728241812,,)
MSI (s) (54:B4) [16:04:27:576]: File: C:\Program Files\SplunkUniversalForwarder\etc\system\README\limits.conf.example; To be installed; Won't patch; No existing file
MSI (s) (54:B4) [16:04:27:576]: Source for file 'fil22BAD424E9CF650ED1C306E097600EF0' is compressed
InstallFiles: File: limits.conf.example, Directory: C:\Program Files\SplunkUniversalForwarder\etc\system\README\, Size: 2515
MSI (s) (54:B4) [16:04:27:576]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\share\splunk\3rdparty\)
MSI (s) (54:B4) [16:04:27:576]: Executing op: SetSourceFolder(Folder=1\w89duo8g\share\splunk\3rdparty\|SplunkUniversalForwarder\share\splunk\3rdparty\)
MSI (s) (54:B4) [16:04:27:576]: Executing op: FileCopy(SourceName=04qmwepw.txt|Copyright-for-libarchive-3.1.2.txt,SourceCabKey=fil22DCE04BD9460C6D8A0DF5D735EC2A23,DestName=Copyright-for-libarchive-3.1.2.txt,Attributes=512,FileSize=2844,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=-687873100,HashPart2=1818809863,HashPart3=871805548,HashPart4=1091057556,,)
MSI (s) (54:B4) [16:04:27:576]: File: C:\Program Files\SplunkUniversalForwarder\share\splunk\3rdparty\Copyright-for-libarchive-3.1.2.txt; To be installed; Won't patch; No existing file
MSI (s) (54:B4) [16:04:27:576]: Source for file 'fil22DCE04BD9460C6D8A0DF5D735EC2A23' is compressed
InstallFiles: File: Copyright-for-libarchive-3.1.2.txt, Directory: C:\Program Files\SplunkUniversalForwarder\share\splunk\3rdparty\, Size: 2844
MSI (s) (54:B4) [16:04:27:576]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\etc\system\README\)
MSI (s) (54:B4) [16:04:27:576]: Executing op: SetSourceFolder(Folder=1\w89duo8g\etc\system\README\|SplunkUniversalForwarder\etc\system\README\)
MSI (s) (54:B4) [16:04:27:576]: Executing op: FileCopy(SourceName=5zjp3gto.spe|audit.conf.spec,SourceCabKey=fil264734AD43DC36937C8A94AC559A1335,DestName=audit.conf.spec,Attributes=512,FileSize=3812,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=1153635391,HashPart2=1734373323,HashPart3=-1644950978,HashPart4=728738041,,)
MSI (s) (54:B4) [16:04:27:576]: File: C:\Program Files\SplunkUniversalForwarder\etc\system\README\audit.conf.spec; To be installed; Won't patch; No existing file
MSI (s) (54:B4) [16:04:27:576]: Source for file 'fil264734AD43DC36937C8A94AC559A1335' is compressed
InstallFiles: File: audit.conf.spec, Directory: C:\Program Files\SplunkUniversalForwarder\etc\system\README\, Size: 3812
MSI (s) (54:B4) [16:04:27:576]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\etc\system\default\)
MSI (s) (54:B4) [16:04:27:576]: Executing op: SetSourceFolder(Folder=1\w89duo8g\etc\system\default\|SplunkUniversalForwarder\etc\system\default\)
MSI (s) (54:B4) [16:04:27:576]: Executing op: FileCopy(SourceName=eq0gnhud.con|authentication.conf,SourceCabKey=fil271C63FDB34AA983C01F6C6F237BFCA7,DestName=authentication.conf,Attributes=512,FileSize=888,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=-1422960279,HashPart2=-1882950277,HashPart3=1131181292,HashPart4=821694118,,)
MSI (s) (54:B4) [16:04:27:576]: File: C:\Program Files\SplunkUniversalForwarder\etc\system\default\authentication.conf; To be installed; Won't patch; No existing file
MSI (s) (54:B4) [16:04:27:576]: Source for file 'fil271C63FDB34AA983C01F6C6F237BFCA7' is compressed
InstallFiles: File: authentication.conf, Directory: C:\Program Files\SplunkUniversalForwarder\etc\system\default\, Size: 888
MSI (s) (54:B4) [16:04:27:576]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\bin\)
MSI (s) (54:B4) [16:04:27:576]: Executing op: SetSourceFolder(Folder=1\w89duo8g\bin\|SplunkUniversalForwarder\bin\)
MSI (s) (54:B4) [16:04:27:576]: Executing op: FileCopy(SourceName=msvcp110.dll,SourceCabKey=fil2723C0264539330A588D9440656B8E92,DestName=msvcp110.dll,Attributes=512,FileSize=661456,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=11.0.51106.1,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (54:B4) [16:04:27:576]: File: C:\Program Files\SplunkUniversalForwarder\bin\msvcp110.dll; To be installed; Won't patch; No existing file
MSI (s) (54:B4) [16:04:27:576]: Source for file 'fil2723C0264539330A588D9440656B8E92' is compressed
InstallFiles: File: msvcp110.dll, Directory: C:\Program Files\SplunkUniversalForwarder\bin\, Size: 661456
MSI (s) (54:B4) [16:04:27:576]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\etc\system\bin\)
MSI (s) (54:B4) [16:04:27:576]: Executing op: SetSourceFolder(Folder=1\w89duo8g\etc\system\bin\|SplunkUniversalForwarder\etc\system\bin\)
MSI (s) (54:B4) [16:04:27:576]: Executing op: FileCopy(SourceName=rpzk5w92.cmd|WinPrintMon.cmd,SourceCabKey=fil29379F3ADCE549F155A70770EE52E1F0,DestName=WinPrintMon.cmd,Attributes=512,FileSize=1542,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=-281352280,HashPart2=-35987048,HashPart3=248240158,HashPart4=-1237185765,,)
MSI (s) (54:B4) [16:04:27:576]: File: C:\Program Files\SplunkUniversalForwarder\etc\system\bin\WinPrintMon.cmd; To be installed; Won't patch; No existing file
MSI (s) (54:B4) [16:04:27:576]: Source for file 'fil29379F3ADCE549F155A70770EE52E1F0' is compressed
InstallFiles: File: WinPrintMon.cmd, Directory: C:\Program Files\SplunkUniversalForwarder\etc\system\bin\, Size: 1542
MSI (s) (54:B4) [16:04:27:592]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\etc\system\README\)
MSI (s) (54:B4) [16:04:27:592]: Executing op: SetSourceFolder(Folder=1\w89duo8g\etc\system\README\|SplunkUniversalForwarder\etc\system\README\)
MSI (s) (54:B4) [16:04:27:592]: Executing op: FileCopy(SourceName=mf_d5lss.spe|restmap.conf.spec,SourceCabKey=fil2A04F9D7AD1F3B2646AED56EAE0F5949,DestName=restmap.conf.spec,Attributes=512,FileSize=8457,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=-2064810904,HashPart2=-509159194,HashPart3=261783588,HashPart4=673983997,,)
MSI (s) (54:B4) [16:04:27:592]: File: C:\Program Files\SplunkUniversalForwarder\etc\system\README\restmap.conf.spec; To be installed; Won't patch; No existing file
MSI (s) (54:B4) [16:04:27:592]: Source for file 'fil2A04F9D7AD1F3B2646AED56EAE0F5949' is compressed
InstallFiles: File: restmap.conf.spec, Directory: C:\Program Files\SplunkUniversalForwarder\etc\system\README\, Size: 8457
MSI (s) (54:B4) [16:04:27:592]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\etc\modules\input\tailfile\)
MSI (s) (54:B4) [16:04:27:592]: Executing op: SetSourceFolder(Folder=1\w89duo8g\etc\modules\input\tailfile\|SplunkUniversalForwarder\etc\modules\input\tailfile\)
MSI (s) (54:B4) [16:04:27:592]: Executing op: FileCopy(SourceName=config.xml,SourceCabKey=fil2A22614B2E6FB8F5630D431337A132B0,DestName=config.xml,Attributes=512,FileSize=842,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=-1138668979,HashPart2=-1737653437,HashPart3=-1043397048,HashPart4=-868779986,,)
MSI (s) (54:B4) [16:04:27:592]: File: C:\Program Files\SplunkUniversalForwarder\etc\modules\input\tailfile\config.xml; To be installed; Won't patch; No existing file
MSI (s) (54:B4) [16:04:27:592]: Source for file 'fil2A22614B2E6FB8F5630D431337A132B0' is compressed
InstallFiles: File: config.xml, Directory: C:\Program Files\SplunkUniversalForwarder\etc\modules\input\tailfile\, Size: 842
MSI (s) (54:B4) [16:04:27:592]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\etc\system\README\)
MSI (s) (54:B4) [16:04:27:592]: Executing op: SetSourceFolder(Folder=1\w89duo8g\etc\system\README\|SplunkUniversalForwarder\etc\system\README\)
MSI (s) (54:B4) [16:04:27:592]: Executing op: FileCopy(SourceName=8lvkesps.spe|inputs.conf.spec,SourceCabKey=fil2EB2D93A84610D6DBF369B1C5EBA3D17,DestName=inputs.conf.spec,Attributes=512,FileSize=72502,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=-1983361258,HashPart2=1867378487,HashPart3=-1313698293,HashPart4=-2076723843,,)
MSI (s) (54:B4) [16:04:27:592]: File: C:\Program Files\SplunkUniversalForwarder\etc\system\README\inputs.conf.spec; To be installed; Won't patch; No existing file
MSI (s) (54:B4) [16:04:27:592]: Source for file 'fil2EB2D93A84610D6DBF369B1C5EBA3D17' is compressed
InstallFiles: File: inputs.conf.spec, Directory: C:\Program Files\SplunkUniversalForwarder\etc\system\README\, Size: 72502
MSI (s) (54:B4) [16:04:27:592]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\etc\system\default\)
MSI (s) (54:B4) [16:04:27:592]: Executing op: SetSourceFolder(Folder=1\w89duo8g\etc\system\default\|SplunkUniversalForwarder\etc\system\default\)
MSI (s) (54:B4) [16:04:27:592]: Executing op: FileCopy(SourceName=ldxzoix-.con|conf.conf,SourceCabKey=fil32542C8806A71DC2B05BF479254E0DC3,DestName=conf.conf,Attributes=512,FileSize=8126,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=-588420880,HashPart2=-474929497,HashPart3=-776727017,HashPart4=-1313057346,,)
MSI (s) (54:B4) [16:04:27:592]: File: C:\Program Files\SplunkUniversalForwarder\etc\system\default\conf.conf; To be installed; Won't patch; No existing file
MSI (s) (54:B4) [16:04:27:592]: Source for file 'fil32542C8806A71DC2B05BF479254E0DC3' is compressed
InstallFiles: File: conf.conf, Directory: C:\Program Files\SplunkUniversalForwarder\etc\system\default\, Size: 8126
MSI (s) (54:B4) [16:04:27:592]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\etc\system\README\)
MSI (s) (54:B4) [16:04:27:592]: Executing op: SetSourceFolder(Folder=1\w89duo8g\etc\system\README\|SplunkUniversalForwarder\etc\system\README\)
MSI (s) (54:B4) [16:04:27:592]: Executing op: FileCopy(SourceName=wtttdo0z.exa|authentication.conf.example,SourceCabKey=fil33D369103C8850E57FB4E5C73DE14EA6,DestName=authentication.conf.example,Attributes=512,FileSize=5115,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=1458533703,HashPart2=-1315603296,HashPart3=-1337577383,HashPart4=1269047504,,)
MSI (s) (54:B4) [16:04:27:592]: File: C:\Program Files\SplunkUniversalForwarder\etc\system\README\authentication.conf.example; To be installed; Won't patch; No existing file
MSI (s) (54:B4) [16:04:27:592]: Source for file 'fil33D369103C8850E57FB4E5C73DE14EA6' is compressed
InstallFiles: File: authentication.conf.example, Directory: C:\Program Files\SplunkUniversalForwarder\etc\system\README\, Size: 5115
MSI (s) (54:B4) [16:04:27:592]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\bin\)
MSI (s) (54:B4) [16:04:27:592]: Executing op: SetSourceFolder(Folder=1\w89duo8g\bin\|SplunkUniversalForwarder\bin\)
MSI (s) (54:B4) [16:04:27:592]: Executing op: FileCopy(SourceName=uqae5q2y.bat|genRootCA.bat,SourceCabKey=fil366998F7A0C63242FD326244DDC744EA,DestName=genRootCA.bat,Attributes=512,FileSize=3604,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=-430358216,HashPart2=1205239170,HashPart3=1911530836,HashPart4=-691452108,,)
MSI (s) (54:B4) [16:04:27:592]: File: C:\Program Files\SplunkUniversalForwarder\bin\genRootCA.bat; To be installed; Won't patch; No existing file
MSI (s) (54:B4) [16:04:27:592]: Source for file 'fil366998F7A0C63242FD326244DDC744EA' is compressed
InstallFiles: File: genRootCA.bat, Directory: C:\Program Files\SplunkUniversalForwarder\bin\, Size: 3604
MSI (s) (54:B4) [16:04:27:592]: Executing op: FileCopy(SourceName=dej0praa.sys|splunkdrv.sys,SourceCabKey=fil37861F6DEED8144CED590D8CE2E5822B,DestName=splunkdrv.sys,Attributes=512,FileSize=34784,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=6.1.7600.16385,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (54:B4) [16:04:27:592]: File: C:\Program Files\SplunkUniversalForwarder\bin\splunkdrv.sys; To be installed; Won't patch; No existing file
MSI (s) (54:B4) [16:04:27:592]: Source for file 'fil37861F6DEED8144CED590D8CE2E5822B' is compressed
InstallFiles: File: splunkdrv.sys, Directory: C:\Program Files\SplunkUniversalForwarder\bin\, Size: 34784
MSI (s) (54:B4) [16:04:27:592]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\etc\system\README\)
MSI (s) (54:B4) [16:04:27:592]: Executing op: SetSourceFolder(Folder=1\w89duo8g\etc\system\README\|SplunkUniversalForwarder\etc\system\README\)
MSI (s) (54:B4) [16:04:27:592]: Executing op: FileCopy(SourceName=41ecmqxq.spe|splunk-launch.conf.spec,SourceCabKey=fil37D819D308A2678F1E4AA8850D622921,DestName=splunk-launch.conf.spec,Attributes=512,FileSize=5752,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=990324642,HashPart2=1461057124,HashPart3=292538904,HashPart4=-1562699362,,)
MSI (s) (54:B4) [16:04:27:592]: File: C:\Program Files\SplunkUniversalForwarder\etc\system\README\splunk-launch.conf.spec; To be installed; Won't patch; No existing file
MSI (s) (54:B4) [16:04:27:592]: Source for file 'fil37D819D308A2678F1E4AA8850D622921' is compressed
InstallFiles: File: splunk-launch.conf.spec, Directory: C:\Program Files\SplunkUniversalForwarder\etc\system\README\, Size: 5752
MSI (s) (54:B4) [16:04:27:608]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\bin\)
MSI (s) (54:B4) [16:04:27:608]: Executing op: SetSourceFolder(Folder=1\w89duo8g\bin\|SplunkUniversalForwarder\bin\)
MSI (s) (54:B4) [16:04:27:608]: Executing op: FileCopy(SourceName=ssleay32.dll,SourceCabKey=fil3AD35433DE15DD536AA83F4C0403D2A2,DestName=ssleay32.dll,Attributes=512,FileSize=357096,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=1.0.1.11,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (54:B4) [16:04:27:608]: File: C:\Program Files\SplunkUniversalForwarder\bin\ssleay32.dll; To be installed; Won't patch; No existing file
MSI (s) (54:B4) [16:04:27:608]: Source for file 'fil3AD35433DE15DD536AA83F4C0403D2A2' is compressed
InstallFiles: File: ssleay32.dll, Directory: C:\Program Files\SplunkUniversalForwarder\bin\, Size: 357096
MSI (s) (54:B4) [16:04:27:608]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\etc\system\README\)
MSI (s) (54:B4) [16:04:27:608]: Executing op: SetSourceFolder(Folder=1\w89duo8g\etc\system\README\|SplunkUniversalForwarder\etc\system\README\)
MSI (s) (54:B4) [16:04:27:608]: Executing op: FileCopy(SourceName=2znqhwz0.exa|default.meta.example,SourceCabKey=fil3FE7115EC3AE211F823F2972087F8179,DestName=default.meta.example,Attributes=512,FileSize=224,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=-2090538519,HashPart2=65360491,HashPart3=-708868962,HashPart4=-249766065,,)
MSI (s) (54:B4) [16:04:27:608]: File: C:\Program Files\SplunkUniversalForwarder\etc\system\README\default.meta.example; To be installed; Won't patch; No existing file
MSI (s) (54:B4) [16:04:27:608]: Source for file 'fil3FE7115EC3AE211F823F2972087F8179' is compressed
InstallFiles: File: default.meta.example, Directory: C:\Program Files\SplunkUniversalForwarder\etc\system\README\, Size: 224
MSI (s) (54:B4) [16:04:27:608]: Executing op: FileCopy(SourceName=mkusa9a_.spe|procmon-filters.conf.spec,SourceCabKey=fil404C9FC8BE0DFB6F4C9B91FB3A312906,DestName=procmon-filters.conf.spec,Attributes=512,FileSize=929,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=-103857690,HashPart2=1857299997,HashPart3=-1159083809,HashPart4=887360214,,)
MSI (s) (54:B4) [16:04:27:608]: File: C:\Program Files\SplunkUniversalForwarder\etc\system\README\procmon-filters.conf.spec; To be installed; Won't patch; No existing file
MSI (s) (54:B4) [16:04:27:608]: Source for file 'fil404C9FC8BE0DFB6F4C9B91FB3A312906' is compressed
InstallFiles: File: procmon-filters.conf.spec, Directory: C:\Program Files\SplunkUniversalForwarder\etc\system\README\, Size: 929
MSI (s) (54:B4) [16:04:27:608]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\etc\apps\search\metadata\)
MSI (s) (54:B4) [16:04:27:608]: Executing op: SetSourceFolder(Folder=1\w89duo8g\etc\apps\search\metadata\|SplunkUniversalForwarder\etc\apps\search\metadata\)
MSI (s) (54:B4) [16:04:27:608]: Executing op: FileCopy(SourceName=2zotdui6.met|default.meta,SourceCabKey=fil43FCBBCFA6460AAF5953FCE4E4322AE1,DestName=default.meta,Attributes=512,FileSize=6004,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=628064247,HashPart2=700204763,HashPart3=175335828,HashPart4=1685080551,,)
MSI (s) (54:B4) [16:04:27:608]: File: C:\Program Files\SplunkUniversalForwarder\etc\apps\search\metadata\default.meta; To be installed; Won't patch; No existing file
MSI (s) (54:B4) [16:04:27:608]: Source for file 'fil43FCBBCFA6460AAF5953FCE4E4322AE1' is compressed
InstallFiles: File: default.meta, Directory: C:\Program Files\SplunkUniversalForwarder\etc\apps\search\metadata\, Size: 6004
MSI (s) (54:B4) [16:04:27:608]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\etc\)
MSI (s) (54:B4) [16:04:27:608]: Executing op: SetSourceFolder(Folder=1\w89duo8g\etc\|SplunkUniversalForwarder\etc\)
MSI (s) (54:B4) [16:04:27:608]: Executing op: FileCopy(SourceName=gdmlzcp-.cfg|log-debug.cfg,SourceCabKey=fil44976CAE08AF2DACB4F1C92B7AED10BC,DestName=log-debug.cfg,Attributes=512,FileSize=5366,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=1632433932,HashPart2=1497339493,HashPart3=564837114,HashPart4=-1903534091,,)
MSI (s) (54:B4) [16:04:27:608]: File: C:\Program Files\SplunkUniversalForwarder\etc\log-debug.cfg; To be installed; Won't patch; No existing file
MSI (s) (54:B4) [16:04:27:608]: Source for file 'fil44976CAE08AF2DACB4F1C92B7AED10BC' is compressed
InstallFiles: File: log-debug.cfg, Directory: C:\Program Files\SplunkUniversalForwarder\etc\, Size: 5366
MSI (s) (54:B4) [16:04:27:608]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\bin\)
MSI (s) (54:B4) [16:04:27:608]: Executing op: SetSourceFolder(Folder=1\w89duo8g\bin\|SplunkUniversalForwarder\bin\)
MSI (s) (54:B4) [16:04:27:608]: Executing op: FileCopy(SourceName=archive.dll,SourceCabKey=fil44A3BE8CF8641E08449085CC60FE643F,DestName=archive.dll,Attributes=512,FileSize=666344,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=1678293772,HashPart2=1201024211,HashPart3=459200597,HashPart4=965900291,,)
MSI (s) (54:B4) [16:04:27:608]: File: C:\Program Files\SplunkUniversalForwarder\bin\archive.dll; To be installed; Won't patch; No existing file
MSI (s) (54:B4) [16:04:27:608]: Source for file 'fil44A3BE8CF8641E08449085CC60FE643F' is compressed
InstallFiles: File: archive.dll, Directory: C:\Program Files\SplunkUniversalForwarder\bin\, Size: 666344
MSI (s) (54:B4) [16:04:27:623]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\etc\system\README\)
MSI (s) (54:B4) [16:04:27:623]: Executing op: SetSourceFolder(Folder=1\w89duo8g\etc\system\README\|SplunkUniversalForwarder\etc\system\README\)
MSI (s) (54:B4) [16:04:27:623]: Executing op: FileCopy(SourceName=krg3g5zn.spe|outputs.conf.spec,SourceCabKey=fil4630B0AEABDF45CCB14D5270D5F4D260,DestName=outputs.conf.spec,Attributes=512,FileSize=26585,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=495938436,HashPart2=-722230977,HashPart3=-1637321958,HashPart4=263876815,,)
MSI (s) (54:B4) [16:04:27:623]: File: C:\Program Files\SplunkUniversalForwarder\etc\system\README\outputs.conf.spec; To be installed; Won't patch; No existing file
MSI (s) (54:B4) [16:04:27:623]: Source for file 'fil4630B0AEABDF45CCB14D5270D5F4D260' is compressed
InstallFiles: File: outputs.conf.spec, Directory: C:\Program Files\SplunkUniversalForwarder\etc\system\README\, Size: 26585
MSI (s) (54:B4) [16:04:27:623]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\etc\)
MSI (s) (54:B4) [16:04:27:623]: Executing op: SetSourceFolder(Folder=1\w89duo8g\etc\|SplunkUniversalForwarder\etc\)
MSI (s) (54:B4) [16:04:27:623]: Executing op: FileCopy(SourceName=log.cfg,SourceCabKey=fil466EC195DC61904AEEA9A89434AADB72,DestName=log.cfg,Attributes=512,FileSize=14458,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=1108520203,HashPart2=1765349201,HashPart3=-333482721,HashPart4=115466130,,)
MSI (s) (54:B4) [16:04:27:623]: File: C:\Program Files\SplunkUniversalForwarder\etc\log.cfg; To be installed; Won't patch; No existing file
MSI (s) (54:B4) [16:04:27:623]: Source for file 'fil466EC195DC61904AEEA9A89434AADB72' is compressed
InstallFiles: File: log.cfg, Directory: C:\Program Files\SplunkUniversalForwarder\etc\, Size: 14458
MSI (s) (54:B4) [16:04:27:623]: Executing op: FileCopy(SourceName=k0wdvovq.ver|splunk.version,SourceCabKey=fil4A30FCCE51746EBE3142D05B9869707E,DestName=splunk.version,Attributes=512,FileSize=69,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=-2105225437,HashPart2=678482637,HashPart3=1542888665,HashPart4=-448735871,,)
MSI (s) (54:B4) [16:04:27:623]: File: C:\Program Files\SplunkUniversalForwarder\etc\splunk.version; To be installed; Won't patch; No existing file
MSI (s) (54:B4) [16:04:27:623]: Source for file 'fil4A30FCCE51746EBE3142D05B9869707E' is compressed
InstallFiles: File: splunk.version, Directory: C:\Program Files\SplunkUniversalForwarder\etc\, Size: 69
MSI (s) (54:B4) [16:04:27:623]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\bin\)
MSI (s) (54:B4) [16:04:27:623]: Executing op: SetSourceFolder(Folder=1\w89duo8g\bin\|SplunkUniversalForwarder\bin\)
MSI (s) (54:B4) [16:04:27:623]: Executing op: FileCopy(SourceName=nbta8nnk.cat|splknetdrv-win7.cat,SourceCabKey=fil4A8CE3D5C39D5E2BA9CF731C7A95E03D,DestName=splknetdrv-win7.cat,Attributes=512,FileSize=6241,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=-1730292164,HashPart2=-1685395197,HashPart3=308304832,HashPart4=2068853175,,)
MSI (s) (54:B4) [16:04:27:623]: File: C:\Program Files\SplunkUniversalForwarder\bin\splknetdrv-win7.cat; To be installed; Won't patch; No existing file
MSI (s) (54:B4) [16:04:27:623]: Source for file 'fil4A8CE3D5C39D5E2BA9CF731C7A95E03D' is compressed
InstallFiles: File: splknetdrv-win7.cat, Directory: C:\Program Files\SplunkUniversalForwarder\bin\, Size: 6241
MSI (s) (54:B4) [16:04:27:623]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\etc\system\README\)
MSI (s) (54:B4) [16:04:27:623]: Executing op: SetSourceFolder(Folder=1\w89duo8g\etc\system\README\|SplunkUniversalForwarder\etc\system\README\)
MSI (s) (54:B4) [16:04:27:623]: Executing op: FileCopy(SourceName=megtlusc.exa|authorize.conf.example,SourceCabKey=fil4B560A713D675FE073EA41BA1F82D187,DestName=authorize.conf.example,Attributes=512,FileSize=1311,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=-530748752,HashPart2=-1857511449,HashPart3=-115039973,HashPart4=-1649368999,,)
MSI (s) (54:B4) [16:04:27:623]: File: C:\Program Files\SplunkUniversalForwarder\etc\system\README\authorize.conf.example; To be installed; Won't patch; No existing file
MSI (s) (54:B4) [16:04:27:623]: Source for file 'fil4B560A713D675FE073EA41BA1F82D187' is compressed
InstallFiles: File: authorize.conf.example, Directory: C:\Program Files\SplunkUniversalForwarder\etc\system\README\, Size: 1311
MSI (s) (54:B4) [16:04:27:623]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\bin\)
MSI (s) (54:B4) [16:04:27:623]: Executing op: SetSourceFolder(Folder=1\w89duo8g\bin\|SplunkUniversalForwarder\bin\)
MSI (s) (54:B4) [16:04:27:623]: Executing op: FileCopy(SourceName=t_jzfhit.sys|SplunkMonitorNoHandledrv-vista.sys,SourceCabKey=fil4C1ED641BF28FA2A61DD7B693032DE6F,DestName=SplunkMonitorNoHandledrv-vista.sys,Attributes=512,FileSize=23520,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=6.2.9200.16384,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (54:B4) [16:04:27:639]: File: C:\Program Files\SplunkUniversalForwarder\bin\SplunkMonitorNoHandledrv-vista.sys; To be installed; Won't patch; No existing file
MSI (s) (54:B4) [16:04:27:639]: Source for file 'fil4C1ED641BF28FA2A61DD7B693032DE6F' is compressed
InstallFiles: File: SplunkMonitorNoHandledrv-vista.sys, Directory: C:\Program Files\SplunkUniversalForwarder\bin\, Size: 23520
MSI (s) (54:B4) [16:04:27:639]: Executing op: FileCopy(SourceName=edeul742.exe|splunk-winprintmon.exe,SourceCabKey=fil4D07E37963F72EF81D9E93968882225E,DestName=splunk-winprintmon.exe,Attributes=512,FileSize=12015848,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=1538.512.0.58998,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (54:B4) [16:04:27:639]: File: C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe; To be installed; Won't patch; No existing file
MSI (s) (54:B4) [16:04:27:639]: Source for file 'fil4D07E37963F72EF81D9E93968882225E' is compressed
InstallFiles: File: splunk-winprintmon.exe, Directory: C:\Program Files\SplunkUniversalForwarder\bin\, Size: 12015848
MSI (s) (54:B4) [16:04:27:717]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\etc\apps\introspection_generator_addon\bin\)
MSI (s) (54:B4) [16:04:27:717]: Executing op: SetSourceFolder(Folder=1\w89duo8g\etc\apps\5ei81amz\bin\|SplunkUniversalForwarder\etc\apps\introspection_generator_addon\bin\)
MSI (s) (54:B4) [16:04:27:717]: Executing op: FileCopy(SourceName=qrb3jhqq.pat|collector.path,SourceCabKey=fil4E2BAD67176624B56FA8FD3FA7EDFF12,DestName=collector.path,Attributes=512,FileSize=54,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=1052004502,HashPart2=-1649069392,HashPart3=-1387125576,HashPart4=-876449678,,)
MSI (s) (54:B4) [16:04:27:717]: File: C:\Program Files\SplunkUniversalForwarder\etc\apps\introspection_generator_addon\bin\collector.path; To be installed; Won't patch; No existing file
MSI (s) (54:B4) [16:04:27:717]: Source for file 'fil4E2BAD67176624B56FA8FD3FA7EDFF12' is compressed
InstallFiles: File: collector.path, Directory: C:\Program Files\SplunkUniversalForwarder\etc\apps\introspection_generator_addon\bin\, Size: 54
MSI (s) (54:B4) [16:04:27:717]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\etc\system\README\)
MSI (s) (54:B4) [16:04:27:717]: Executing op: SetSourceFolder(Folder=1\w89duo8g\etc\system\README\|SplunkUniversalForwarder\etc\system\README\)
MSI (s) (54:B4) [16:04:27:717]: Executing op: FileCopy(SourceName=hqbv4l9s.exa|alert_actions.conf.example,SourceCabKey=fil4F10D3485D0CF23408D456E044B24BF5,DestName=alert_actions.conf.example,Attributes=512,FileSize=2478,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=937244969,HashPart2=1819344320,HashPart3=-1544473042,HashPart4=989668813,,)
MSI (s) (54:B4) [16:04:27:717]: File: C:\Program Files\SplunkUniversalForwarder\etc\system\README\alert_actions.conf.example; To be installed; Won't patch; No existing file
MSI (s) (54:B4) [16:04:27:717]: Source for file 'fil4F10D3485D0CF23408D456E044B24BF5' is compressed
InstallFiles: File: alert_actions.conf.example, Directory: C:\Program Files\SplunkUniversalForwarder\etc\system\README\, Size: 2478
MSI (s) (54:B4) [16:04:27:733]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\bin\)
MSI (s) (54:B4) [16:04:27:733]: Executing op: SetSourceFolder(Folder=1\w89duo8g\bin\|SplunkUniversalForwarder\bin\)
MSI (s) (54:B4) [16:04:27:733]: Executing op: FileCopy(SourceName=classify.exe,SourceCabKey=fil5006D38C4CF41C30E22B57CF650CD445,DestName=classify.exe,Attributes=512,FileSize=67816,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=1538.512.0.58998,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (54:B4) [16:04:27:733]: File: C:\Program Files\SplunkUniversalForwarder\bin\classify.exe; To be installed; Won't patch; No existing file
MSI (s) (54:B4) [16:04:27:733]: Source for file 'fil5006D38C4CF41C30E22B57CF650CD445' is compressed
InstallFiles: File: classify.exe, Directory: C:\Program Files\SplunkUniversalForwarder\bin\, Size: 67816
MSI (s) (54:B4) [16:04:27:733]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\etc\system\README\)
MSI (s) (54:B4) [16:04:27:733]: Executing op: SetSourceFolder(Folder=1\w89duo8g\etc\system\README\|SplunkUniversalForwarder\etc\system\README\)
MSI (s) (54:B4) [16:04:27:733]: Executing op: FileCopy(SourceName=d1utadrf.spe|user-seed.conf.spec,SourceCabKey=fil5165C7E609ABA9D25E73DD9015665047,DestName=user-seed.conf.spec,Attributes=512,FileSize=785,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=-1137428321,HashPart2=-1131341667,HashPart3=-1272286789,HashPart4=-1080493099,,)
MSI (s) (54:B4) [16:04:27:733]: File: C:\Program Files\SplunkUniversalForwarder\etc\system\README\user-seed.conf.spec; To be installed; Won't patch; No existing file
MSI (s) (54:B4) [16:04:27:733]: Source for file 'fil5165C7E609ABA9D25E73DD9015665047' is compressed
InstallFiles: File: user-seed.conf.spec, Directory: C:\Program Files\SplunkUniversalForwarder\etc\system\README\, Size: 785
MSI (s) (54:B4) [16:04:27:733]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\etc\apps\learned\default\)
MSI (s) (54:B4) [16:04:27:733]: Executing op: SetSourceFolder(Folder=1\w89duo8g\etc\apps\learned\default\|SplunkUniversalForwarder\etc\apps\learned\default\)
MSI (s) (54:B4) [16:04:27:733]: Executing op: FileCopy(SourceName=README,SourceCabKey=fil52AB5FA48DD0B6BE93B3A54067039578,DestName=README,Attributes=512,FileSize=202,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=-1130544763,HashPart2=-696892182,HashPart3=2016650509,HashPart4=1546646914,,)
MSI (s) (54:B4) [16:04:27:733]: File: C:\Program Files\SplunkUniversalForwarder\etc\apps\learned\default\README; To be installed; Won't patch; No existing file
MSI (s) (54:B4) [16:04:27:733]: Source for file 'fil52AB5FA48DD0B6BE93B3A54067039578' is compressed
InstallFiles: File: README, Directory: C:\Program Files\SplunkUniversalForwarder\etc\apps\learned\default\, Size: 202
MSI (s) (54:B4) [16:04:27:733]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\)
MSI (s) (54:B4) [16:04:27:733]: Executing op: SetSourceFolder(Folder=1\w89duo8g\|SplunkUniversalForwarder\)
MSI (s) (54:B4) [16:04:27:733]: Executing op: FileCopy(SourceName=manifest.txt,SourceCabKey=fil5310656A829E8E681CDA8D48BB3171CA,DestName=manifest.txt,Attributes=512,FileSize=17387,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=-220500898,HashPart2=-682411067,HashPart3=1144282109,HashPart4=-326769010,,)
MSI (s) (54:B4) [16:04:27:733]: File: C:\Program Files\SplunkUniversalForwarder\manifest.txt; To be installed; Won't patch; No existing file
MSI (s) (54:B4) [16:04:27:733]: Source for file 'fil5310656A829E8E681CDA8D48BB3171CA' is compressed
InstallFiles: File: manifest.txt, Directory: C:\Program Files\SplunkUniversalForwarder\, Size: 17387
MSI (s) (54:B4) [16:04:27:733]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\etc\)
MSI (s) (54:B4) [16:04:27:733]: Executing op: SetSourceFolder(Folder=1\w89duo8g\etc\|SplunkUniversalForwarder\etc\)
MSI (s) (54:B4) [16:04:27:733]: Executing op: FileCopy(SourceName=ninxeucq.txt|copyright.txt,SourceCabKey=fil53A96EF6A1674605CCCEE6D85EC29D9F,DestName=copyright.txt,Attributes=512,FileSize=58,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=-869762882,HashPart2=1582527905,HashPart3=1827730478,HashPart4=-420082666,,)
MSI (s) (54:B4) [16:04:27:733]: File: C:\Program Files\SplunkUniversalForwarder\etc\copyright.txt; To be installed; Won't patch; No existing file
MSI (s) (54:B4) [16:04:27:733]: Source for file 'fil53A96EF6A1674605CCCEE6D85EC29D9F' is compressed
InstallFiles: File: copyright.txt, Directory: C:\Program Files\SplunkUniversalForwarder\etc\, Size: 58
MSI (s) (54:B4) [16:04:27:733]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\etc\modules\input\UDP\)
MSI (s) (54:B4) [16:04:27:733]: Executing op: SetSourceFolder(Folder=1\w89duo8g\etc\modules\input\UDP\|SplunkUniversalForwarder\etc\modules\input\UDP\)
MSI (s) (54:B4) [16:04:27:733]: Executing op: FileCopy(SourceName=config.xml,SourceCabKey=fil5462E131BE0455E42F53F3655D3B72AA,DestName=config.xml,Attributes=512,FileSize=415,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=163909115,HashPart2=1135086232,HashPart3=1978489534,HashPart4=126574299,,)
MSI (s) (54:B4) [16:04:27:733]: File: C:\Program Files\SplunkUniversalForwarder\etc\modules\input\UDP\config.xml; To be installed; Won't patch; No existing file
MSI (s) (54:B4) [16:04:27:733]: Source for file 'fil5462E131BE0455E42F53F3655D3B72AA' is compressed
InstallFiles: File: config.xml, Directory: C:\Program Files\SplunkUniversalForwarder\etc\modules\input\UDP\, Size: 415
MSI (s) (54:B4) [16:04:27:733]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\bin\)
MSI (s) (54:B4) [16:04:27:733]: Executing op: SetSourceFolder(Folder=1\w89duo8g\bin\|SplunkUniversalForwarder\bin\)
MSI (s) (54:B4) [16:04:27:733]: Executing op: FileCopy(SourceName=9aeuy9wg.sys|splknetdrv-vista.sys,SourceCabKey=fil55D7C2F37B1E4D5B63C3950406F110CB,DestName=splknetdrv-vista.sys,Attributes=512,FileSize=40928,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=6.2.9200.16384,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (54:B4) [16:04:27:733]: File: C:\Program Files\SplunkUniversalForwarder\bin\splknetdrv-vista.sys; To be installed; Won't patch; No existing file
MSI (s) (54:B4) [16:04:27:733]: Source for file 'fil55D7C2F37B1E4D5B63C3950406F110CB' is compressed
InstallFiles: File: splknetdrv-vista.sys, Directory: C:\Program Files\SplunkUniversalForwarder\bin\, Size: 40928
MSI (s) (54:B4) [16:04:27:748]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\etc\)
MSI (s) (54:B4) [16:04:27:748]: Executing op: SetSourceFolder(Folder=1\w89duo8g\etc\|SplunkUniversalForwarder\etc\)
MSI (s) (54:B4) [16:04:27:748]: Executing op: FileCopy(SourceName=nriaufdg.cfg|log-cmdline.cfg,SourceCabKey=fil56695E0AD47C11C58E66D19975134414,DestName=log-cmdline.cfg,Attributes=512,FileSize=1930,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=1364815790,HashPart2=-459804079,HashPart3=267726170,HashPart4=47525784,,)
MSI (s) (54:B4) [16:04:27:748]: File: C:\Program Files\SplunkUniversalForwarder\etc\log-cmdline.cfg; To be installed; Won't patch; No existing file
MSI (s) (54:B4) [16:04:27:748]: Source for file 'fil56695E0AD47C11C58E66D19975134414' is compressed
InstallFiles: File: log-cmdline.cfg, Directory: C:\Program Files\SplunkUniversalForwarder\etc\, Size: 1930
MSI (s) (54:B4) [16:04:27:748]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\bin\)
MSI (s) (54:B4) [16:04:27:748]: Executing op: SetSourceFolder(Folder=1\w89duo8g\bin\|SplunkUniversalForwarder\bin\)
MSI (s) (54:B4) [16:04:27:748]: Executing op: FileCopy(SourceName=krku_kwz.inf|splunkdrv.inf,SourceCabKey=fil56AB974A07C8AC559B21B8401F6E07F1,DestName=splunkdrv.inf,Attributes=512,FileSize=1360,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=1001235108,HashPart2=1295769450,HashPart3=606917336,HashPart4=-1581589974,,)
MSI (s) (54:B4) [16:04:27:748]: File: C:\Program Files\SplunkUniversalForwarder\bin\splunkdrv.inf; To be installed; Won't patch; No existing file
MSI (s) (54:B4) [16:04:27:748]: Source for file 'fil56AB974A07C8AC559B21B8401F6E07F1' is compressed
InstallFiles: File: splunkdrv.inf, Directory: C:\Program Files\SplunkUniversalForwarder\bin\, Size: 1360
MSI (s) (54:B4) [16:04:27:748]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\etc\system\README\)
MSI (s) (54:B4) [16:04:27:748]: Executing op: SetSourceFolder(Folder=1\w89duo8g\etc\system\README\|SplunkUniversalForwarder\etc\system\README\)
MSI (s) (54:B4) [16:04:27:748]: Executing op: FileCopy(SourceName=c47qyawg.spe|alert_actions.conf.spec,SourceCabKey=fil5727116202953C8077AC3779B94B237A,DestName=alert_actions.conf.spec,Attributes=512,FileSize=13289,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=-1660457345,HashPart2=329615032,HashPart3=-741019336,HashPart4=1458852423,,)
MSI (s) (54:B4) [16:04:27:748]: File: C:\Program Files\SplunkUniversalForwarder\etc\system\README\alert_actions.conf.spec; To be installed; Won't patch; No existing file
MSI (s) (54:B4) [16:04:27:748]: Source for file 'fil5727116202953C8077AC3779B94B237A' is compressed
InstallFiles: File: alert_actions.conf.spec, Directory: C:\Program Files\SplunkUniversalForwarder\etc\system\README\, Size: 13289
MSI (s) (54:B4) [16:04:27:748]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\share\splunk\)
MSI (s) (54:B4) [16:04:27:748]: Executing op: SetSourceFolder(Folder=1\w89duo8g\share\splunk\|SplunkUniversalForwarder\share\splunk\)
MSI (s) (54:B4) [16:04:27:748]: Executing op: FileCopy(SourceName=am2u_f8y.tgz|splunk-add-on-for-microsoft-windows_472.tgz,SourceCabKey=fil57DFE2263928701FA583D77D20DFA724,DestName=splunk-add-on-for-microsoft-windows_472.tgz,Attributes=512,FileSize=545739,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=-1576156598,HashPart2=-1605813515,HashPart3=-1961456136,HashPart4=-192454938,,)
MSI (s) (54:B4) [16:04:27:748]: File: C:\Program Files\SplunkUniversalForwarder\share\splunk\splunk-add-on-for-microsoft-windows_472.tgz; To be installed; Won't patch; No existing file
MSI (s) (54:B4) [16:04:27:748]: Source for file 'fil57DFE2263928701FA583D77D20DFA724' is compressed
InstallFiles: File: splunk-add-on-for-microsoft-windows_472.tgz, Directory: C:\Program Files\SplunkUniversalForwarder\share\splunk\, Size: 545739
MSI (s) (54:B4) [16:04:27:748]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\etc\)
MSI (s) (54:B4) [16:04:27:748]: Executing op: SetSourceFolder(Folder=1\w89duo8g\etc\|SplunkUniversalForwarder\etc\)
MSI (s) (54:B4) [16:04:27:748]: Executing op: FileCopy(SourceName=b-4oktbx.cfg|log-btool.cfg,SourceCabKey=fil5884957E3E3CB363455D8AC79A5274CC,DestName=log-btool.cfg,Attributes=512,FileSize=540,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=-1213687962,HashPart2=898609128,HashPart3=2037577204,HashPart4=-243085508,,)
MSI (s) (54:B4) [16:04:27:748]: File: C:\Program Files\SplunkUniversalForwarder\etc\log-btool.cfg; To be installed; Won't patch; No existing file
MSI (s) (54:B4) [16:04:27:748]: Source for file 'fil5884957E3E3CB363455D8AC79A5274CC' is compressed
InstallFiles: File: log-btool.cfg, Directory: C:\Program Files\SplunkUniversalForwarder\etc\, Size: 540
MSI (s) (54:B4) [16:04:27:748]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\etc\apps\SplunkUniversalForwarder\default\)
MSI (s) (54:B4) [16:04:27:748]: Executing op: SetSourceFolder(Folder=1\w89duo8g\etc\apps\0k4ci1p3\default\|SplunkUniversalForwarder\etc\apps\SplunkUniversalForwarder\default\)
MSI (s) (54:B4) [16:04:27:748]: Executing op: FileCopy(SourceName=7rrb8epm.con|outputs.conf,SourceCabKey=fil59C088F5BE74CA2DD5D5A6A06C28D746,DestName=outputs.conf,Attributes=512,FileSize=192,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=592299294,HashPart2=1459362115,HashPart3=285547050,HashPart4=-1079939317,,)
MSI (s) (54:B4) [16:04:27:748]: File: C:\Program Files\SplunkUniversalForwarder\etc\apps\SplunkUniversalForwarder\default\outputs.conf; To be installed; Won't patch; No existing file
MSI (s) (54:B4) [16:04:27:748]: Source for file 'fil59C088F5BE74CA2DD5D5A6A06C28D746' is compressed
InstallFiles: File: outputs.conf, Directory: C:\Program Files\SplunkUniversalForwarder\etc\apps\SplunkUniversalForwarder\default\, Size: 192
MSI (s) (54:B4) [16:04:27:748]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\lib\)
MSI (s) (54:B4) [16:04:27:748]: Executing op: SetSourceFolder(Folder=1\w89duo8g\lib\|SplunkUniversalForwarder\lib\)
MSI (s) (54:B4) [16:04:27:748]: Executing op: FileCopy(SourceName=-c2lxtqm.txt|copyright.txt,SourceCabKey=fil5A7DA85A972CF3CF8B1399849A45F243,DestName=copyright.txt,Attributes=512,FileSize=58,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=-869762882,HashPart2=1582527905,HashPart3=1827730478,HashPart4=-420082666,,)
MSI (s) (54:B4) [16:04:27:748]: File: C:\Program Files\SplunkUniversalForwarder\lib\copyright.txt; To be installed; Won't patch; No existing file
MSI (s) (54:B4) [16:04:27:748]: Source for file 'fil5A7DA85A972CF3CF8B1399849A45F243' is compressed
InstallFiles: File: copyright.txt, Directory: C:\Program Files\SplunkUniversalForwarder\lib\, Size: 58
MSI (s) (54:B4) [16:04:27:764]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\bin\)
MSI (s) (54:B4) [16:04:27:764]: Executing op: SetSourceFolder(Folder=1\w89duo8g\bin\|SplunkUniversalForwarder\bin\)
MSI (s) (54:B4) [16:04:27:764]: Executing op: FileCopy(SourceName=8wdsbznq.exe|splunk-netmon.exe,SourceCabKey=fil5AC0443DACF11BD6F6DFDAAB0174089F,DestName=splunk-netmon.exe,Attributes=512,FileSize=12070120,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=1538.512.0.58998,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (54:B4) [16:04:27:764]: File: C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe; To be installed; Won't patch; No existing file
MSI (s) (54:B4) [16:04:27:764]: Source for file 'fil5AC0443DACF11BD6F6DFDAAB0174089F' is compressed
InstallFiles: File: splunk-netmon.exe, Directory: C:\Program Files\SplunkUniversalForwarder\bin\, Size: 12070120
MSI (s) (54:B4) [16:04:27:842]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\etc\system\default\)
MSI (s) (54:B4) [16:04:27:842]: Executing op: SetSourceFolder(Folder=1\w89duo8g\etc\system\default\|SplunkUniversalForwarder\etc\system\default\)
MSI (s) (54:B4) [16:04:27:842]: Executing op: FileCopy(SourceName=nbvbx1k0.con|web.conf,SourceCabKey=fil5BA2628FF9032DDFEF9E1021420F4C51,DestName=web.conf,Attributes=512,FileSize=40802,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=-1554929763,HashPart2=456355588,HashPart3=353317302,HashPart4=231622110,,)
MSI (s) (54:B4) [16:04:27:842]: File: C:\Program Files\SplunkUniversalForwarder\etc\system\default\web.conf; To be installed; Won't patch; No existing file
MSI (s) (54:B4) [16:04:27:842]: Source for file 'fil5BA2628FF9032DDFEF9E1021420F4C51' is compressed
InstallFiles: File: web.conf, Directory: C:\Program Files\SplunkUniversalForwarder\etc\system\default\, Size: 40802
MSI (s) (54:B4) [16:04:27:842]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\bin\scripts\)
MSI (s) (54:B4) [16:04:27:842]: Executing op: SetSourceFolder(Folder=1\w89duo8g\bin\scripts\|SplunkUniversalForwarder\bin\scripts\)
MSI (s) (54:B4) [16:04:27:842]: Executing op: FileCopy(SourceName=ibnzrvzb.pat|splunk-perfmon.path,SourceCabKey=fil5CB5E79D406B095C6C3C84B9C5B62B3E,DestName=splunk-perfmon.path,Attributes=512,FileSize=37,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=-409968891,HashPart2=163950516,HashPart3=-1825442477,HashPart4=1775080941,,)
MSI (s) (54:B4) [16:04:27:842]: File: C:\Program Files\SplunkUniversalForwarder\bin\scripts\splunk-perfmon.path; To be installed; Won't patch; No existing file
MSI (s) (54:B4) [16:04:27:842]: Source for file 'fil5CB5E79D406B095C6C3C84B9C5B62B3E' is compressed
InstallFiles: File: splunk-perfmon.path, Directory: C:\Program Files\SplunkUniversalForwarder\bin\scripts\, Size: 37
MSI (s) (54:B4) [16:04:27:842]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\bin\)
MSI (s) (54:B4) [16:04:27:842]: Executing op: SetSourceFolder(Folder=1\w89duo8g\bin\|SplunkUniversalForwarder\bin\)
MSI (s) (54:B4) [16:04:27:842]: Executing op: FileCopy(SourceName=i3zz26fd.sys|SplunkMonitorNoHandledrv-win7.sys,SourceCabKey=fil5D91D555032A73AFEDBE8938A56F56BF,DestName=SplunkMonitorNoHandledrv-win7.sys,Attributes=512,FileSize=23520,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=6.2.9200.16384,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (54:B4) [16:04:27:842]: File: C:\Program Files\SplunkUniversalForwarder\bin\SplunkMonitorNoHandledrv-win7.sys; To be installed; Won't patch; No existing file
MSI (s) (54:B4) [16:04:27:842]: Source for file 'fil5D91D555032A73AFEDBE8938A56F56BF' is compressed
InstallFiles: File: SplunkMonitorNoHandledrv-win7.sys, Directory: C:\Program Files\SplunkUniversalForwarder\bin\, Size: 23520
MSI (s) (54:B4) [16:04:27:842]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\etc\system\README\)
MSI (s) (54:B4) [16:04:27:842]: Executing op: SetSourceFolder(Folder=1\w89duo8g\etc\system\README\|SplunkUniversalForwarder\etc\system\README\)
MSI (s) (54:B4) [16:04:27:842]: Executing op: FileCopy(SourceName=vyr9wkbz.exa|procmon-filters.conf.example,SourceCabKey=fil5EBC7795E658D5E4619CAF92D6940798,DestName=procmon-filters.conf.example,Attributes=512,FileSize=656,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=179271890,HashPart2=-2129294931,HashPart3=2117268412,HashPart4=-246548566,,)
MSI (s) (54:B4) [16:04:27:842]: File: C:\Program Files\SplunkUniversalForwarder\etc\system\README\procmon-filters.conf.example; To be installed; Won't patch; No existing file
MSI (s) (54:B4) [16:04:27:842]: Source for file 'fil5EBC7795E658D5E4619CAF92D6940798' is compressed
InstallFiles: File: procmon-filters.conf.example, Directory: C:\Program Files\SplunkUniversalForwarder\etc\system\README\, Size: 656
MSI (s) (54:B4) [16:04:27:842]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\bin\)
MSI (s) (54:B4) [16:04:27:842]: Executing op: SetSourceFolder(Folder=1\w89duo8g\bin\|SplunkUniversalForwarder\bin\)
MSI (s) (54:B4) [16:04:27:842]: Executing op: FileCopy(SourceName=tic2edii.cat|SplunkMonitorNoHandledrv-vista.cat,SourceCabKey=fil5F2BF49118EBFDD358AEF53FA5FC3108,DestName=SplunkMonitorNoHandledrv-vista.cat,Attributes=512,FileSize=6301,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=-242817376,HashPart2=1478055152,HashPart3=858933767,HashPart4=1863657015,,)
MSI (s) (54:B4) [16:04:27:842]: File: C:\Program Files\SplunkUniversalForwarder\bin\SplunkMonitorNoHandledrv-vista.cat; To be installed; Won't patch; No existing file
MSI (s) (54:B4) [16:04:27:842]: Source for file 'fil5F2BF49118EBFDD358AEF53FA5FC3108' is compressed
InstallFiles: File: SplunkMonitorNoHandledrv-vista.cat, Directory: C:\Program Files\SplunkUniversalForwarder\bin\, Size: 6301
MSI (s) (54:B4) [16:04:27:842]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\bin\scripts\)
MSI (s) (54:B4) [16:04:27:858]: Executing op: SetSourceFolder(Folder=1\w89duo8g\bin\scripts\|SplunkUniversalForwarder\bin\scripts\)
MSI (s) (54:B4) [16:04:27:858]: Executing op: FileCopy(SourceName=6vwibzoz.pat|splunk-netmon.path,SourceCabKey=fil610552BBC767BCA2A5220D523F64B101,DestName=splunk-netmon.path,Attributes=512,FileSize=36,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=-692822318,HashPart2=-1317284733,HashPart3=-408541598,HashPart4=1020146797,,)
MSI (s) (54:B4) [16:04:27:858]: File: C:\Program Files\SplunkUniversalForwarder\bin\scripts\splunk-netmon.path; To be installed; Won't patch; No existing file
MSI (s) (54:B4) [16:04:27:858]: Source for file 'fil610552BBC767BCA2A5220D523F64B101' is compressed
InstallFiles: File: splunk-netmon.path, Directory: C:\Program Files\SplunkUniversalForwarder\bin\scripts\, Size: 36
MSI (s) (54:B4) [16:04:27:858]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\bin\)
MSI (s) (54:B4) [16:04:27:858]: Executing op: SetSourceFolder(Folder=1\w89duo8g\bin\|SplunkUniversalForwarder\bin\)
MSI (s) (54:B4) [16:04:27:858]: Executing op: FileCopy(SourceName=srm.exe,SourceCabKey=fil6297AF418BE81035D75C06B343A7F5F2,DestName=srm.exe,Attributes=512,FileSize=155880,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=68398371,HashPart2=-246666422,HashPart3=1331792906,HashPart4=-1742218177,,)
MSI (s) (54:B4) [16:04:27:858]: File: C:\Program Files\SplunkUniversalForwarder\bin\srm.exe; To be installed; Won't patch; No existing file
MSI (s) (54:B4) [16:04:27:858]: Source for file 'fil6297AF418BE81035D75C06B343A7F5F2' is compressed
InstallFiles: File: srm.exe, Directory: C:\Program Files\SplunkUniversalForwarder\bin\, Size: 155880
MSI (s) (54:B4) [16:04:27:858]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\bin\scripts\)
MSI (s) (54:B4) [16:04:27:858]: Executing op: SetSourceFolder(Folder=1\w89duo8g\bin\scripts\|SplunkUniversalForwarder\bin\scripts\)
MSI (s) (54:B4) [16:04:27:858]: Executing op: FileCopy(SourceName=yyl1ql-a.pat|splunk-MonitorNoHandle.path,SourceCabKey=fil63D45CDA175E0D40CEC55705F1E732FD,DestName=splunk-MonitorNoHandle.path,Attributes=512,FileSize=45,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=901330132,HashPart2=-638525777,HashPart3=-918774042,HashPart4=2093703759,,)
MSI (s) (54:B4) [16:04:27:858]: File: C:\Program Files\SplunkUniversalForwarder\bin\scripts\splunk-MonitorNoHandle.path; To be installed; Won't patch; No existing file
MSI (s) (54:B4) [16:04:27:858]: Source for file 'fil63D45CDA175E0D40CEC55705F1E732FD' is compressed
InstallFiles: File: splunk-MonitorNoHandle.path, Directory: C:\Program Files\SplunkUniversalForwarder\bin\scripts\, Size: 45
MSI (s) (54:B4) [16:04:27:858]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\bin\)
MSI (s) (54:B4) [16:04:27:858]: Executing op: SetSourceFolder(Folder=1\w89duo8g\bin\|SplunkUniversalForwarder\bin\)
MSI (s) (54:B4) [16:04:27:858]: Executing op: FileCopy(SourceName=libeay32.dll,SourceCabKey=fil64689A9A74111D128DA996C02A8FE45F,DestName=libeay32.dll,Attributes=512,FileSize=2070248,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=1.0.1.11,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (54:B4) [16:04:27:858]: File: C:\Program Files\SplunkUniversalForwarder\bin\libeay32.dll; To be installed; Won't patch; No existing file
MSI (s) (54:B4) [16:04:27:858]: Source for file 'fil64689A9A74111D128DA996C02A8FE45F' is compressed
InstallFiles: File: libeay32.dll, Directory: C:\Program Files\SplunkUniversalForwarder\bin\, Size: 2070248
MSI (s) (54:B4) [16:04:27:873]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\share\splunk\3rdparty\)
MSI (s) (54:B4) [16:04:27:873]: Executing op: SetSourceFolder(Folder=1\w89duo8g\share\splunk\3rdparty\|SplunkUniversalForwarder\share\splunk\3rdparty\)
MSI (s) (54:B4) [16:04:27:873]: Executing op: FileCopy(SourceName=ffoa5m4p.txt|Copyright-for-minihook.txt,SourceCabKey=fil653549A0EC59F12B9DDF8874403F1690,DestName=Copyright-for-minihook.txt,Attributes=512,FileSize=4038,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=-1537090968,HashPart2=1623528861,HashPart3=-622699525,HashPart4=614727207,,)
MSI (s) (54:B4) [16:04:27:873]: File: C:\Program Files\SplunkUniversalForwarder\share\splunk\3rdparty\Copyright-for-minihook.txt; To be installed; Won't patch; No existing file
MSI (s) (54:B4) [16:04:27:873]: Source for file 'fil653549A0EC59F12B9DDF8874403F1690' is compressed
InstallFiles: File: Copyright-for-minihook.txt, Directory: C:\Program Files\SplunkUniversalForwarder\share\splunk\3rdparty\, Size: 4038
MSI (s) (54:B4) [16:04:27:873]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\bin\)
MSI (s) (54:B4) [16:04:27:873]: Executing op: SetSourceFolder(Folder=1\w89duo8g\bin\|SplunkUniversalForwarder\bin\)
MSI (s) (54:B4) [16:04:27:873]: Executing op: FileCopy(SourceName=g4g-dxun.exe|splunk-winhostinfo.exe,SourceCabKey=fil655FA1EF3E8115960B9C776217D6AABA,DestName=splunk-winhostinfo.exe,Attributes=512,FileSize=11974376,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=1538.512.0.58998,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (54:B4) [16:04:27:873]: File: C:\Program Files\SplunkUniversalForwarder\bin\splunk-winhostinfo.exe; To be installed; Won't patch; No existing file
MSI (s) (54:B4) [16:04:27:873]: Source for file 'fil655FA1EF3E8115960B9C776217D6AABA' is compressed
InstallFiles: File: splunk-winhostinfo.exe, Directory: C:\Program Files\SplunkUniversalForwarder\bin\, Size: 11974376
MSI (s) (54:B4) [16:04:27:967]: Executing op: FileCopy(SourceName=vkykscbw.dll|libbson-1.0.dll,SourceCabKey=fil65C6A0BF6E1BA41E215C10F385C20BB8,DestName=libbson-1.0.dll,Attributes=512,FileSize=121576,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=-1044336480,HashPart2=-2101664241,HashPart3=-1861466516,HashPart4=1454906666,,)
MSI (s) (54:B4) [16:04:27:967]: File: C:\Program Files\SplunkUniversalForwarder\bin\libbson-1.0.dll; To be installed; Won't patch; No existing file
MSI (s) (54:B4) [16:04:27:967]: Source for file 'fil65C6A0BF6E1BA41E215C10F385C20BB8' is compressed
InstallFiles: File: libbson-1.0.dll, Directory: C:\Program Files\SplunkUniversalForwarder\bin\, Size: 121576
MSI (s) (54:B4) [16:04:27:967]: Executing op: FileCopy(SourceName=splunk.exe,SourceCabKey=fil664EC4FB7C2356A58135B450A56F28B7,DestName=splunk.exe,Attributes=512,FileSize=410856,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=1538.512.0.58998,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (54:B4) [16:04:27:967]: File: C:\Program Files\SplunkUniversalForwarder\bin\splunk.exe; To be installed; Won't patch; No existing file
MSI (s) (54:B4) [16:04:27:967]: Source for file 'fil664EC4FB7C2356A58135B450A56F28B7' is compressed
InstallFiles: File: splunk.exe, Directory: C:\Program Files\SplunkUniversalForwarder\bin\, Size: 410856
MSI (s) (54:B4) [16:04:27:967]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\etc\system\bin\)
MSI (s) (54:B4) [16:04:27:967]: Executing op: SetSourceFolder(Folder=1\w89duo8g\etc\system\bin\|SplunkUniversalForwarder\etc\system\bin\)
MSI (s) (54:B4) [16:04:27:967]: Executing op: FileCopy(SourceName=hhxr_wbe.cmd|WinRegMon.cmd,SourceCabKey=fil68A50A2272E509D3A0AA798E82154F54,DestName=WinRegMon.cmd,Attributes=512,FileSize=2067,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=455779768,HashPart2=-2123177526,HashPart3=-382764272,HashPart4=-1673843536,,)
MSI (s) (54:B4) [16:04:27:967]: File: C:\Program Files\SplunkUniversalForwarder\etc\system\bin\WinRegMon.cmd; To be installed; Won't patch; No existing file
MSI (s) (54:B4) [16:04:27:967]: Source for file 'fil68A50A2272E509D3A0AA798E82154F54' is compressed
InstallFiles: File: WinRegMon.cmd, Directory: C:\Program Files\SplunkUniversalForwarder\etc\system\bin\, Size: 2067
MSI (s) (54:B4) [16:04:27:967]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\etc\modules\input\wineventlog\)
MSI (s) (54:B4) [16:04:27:967]: Executing op: SetSourceFolder(Folder=1\w89duo8g\etc\modules\input\mtkm03vq\|SplunkUniversalForwarder\etc\modules\input\wineventlog\)
MSI (s) (54:B4) [16:04:27:967]: Executing op: FileCopy(SourceName=config.xml,SourceCabKey=fil6A280352AA7257EE97E2FB3D38405A46,DestName=config.xml,Attributes=512,FileSize=610,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=345718431,HashPart2=860315316,HashPart3=639300282,HashPart4=-1111168977,,)
MSI (s) (54:B4) [16:04:27:983]: File: C:\Program Files\SplunkUniversalForwarder\etc\modules\input\wineventlog\config.xml; To be installed; Won't patch; No existing file
MSI (s) (54:B4) [16:04:27:983]: Source for file 'fil6A280352AA7257EE97E2FB3D38405A46' is compressed
InstallFiles: File: config.xml, Directory: C:\Program Files\SplunkUniversalForwarder\etc\modules\input\wineventlog\, Size: 610
MSI (s) (54:B4) [16:04:27:983]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\etc\system\README\)
MSI (s) (54:B4) [16:04:27:983]: Executing op: SetSourceFolder(Folder=1\w89duo8g\etc\system\README\|SplunkUniversalForwarder\etc\system\README\)
MSI (s) (54:B4) [16:04:27:983]: Executing op: FileCopy(SourceName=slj4jpzv.spe|limits.conf.spec,SourceCabKey=fil6A95F59DD886AFA96BDC42B549CCB72B,DestName=limits.conf.spec,Attributes=512,FileSize=63038,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=-982967160,HashPart2=-1266247235,HashPart3=84333543,HashPart4=-298391827,,)
MSI (s) (54:B4) [16:04:27:983]: File: C:\Program Files\SplunkUniversalForwarder\etc\system\README\limits.conf.spec; To be installed; Won't patch; No existing file
MSI (s) (54:B4) [16:04:27:983]: Source for file 'fil6A95F59DD886AFA96BDC42B549CCB72B' is compressed
InstallFiles: File: limits.conf.spec, Directory: C:\Program Files\SplunkUniversalForwarder\etc\system\README\, Size: 63038
MSI (s) (54:B4) [16:04:27:983]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\etc\system\default\)
MSI (s) (54:B4) [16:04:27:983]: Executing op: SetSourceFolder(Folder=1\w89duo8g\etc\system\default\|SplunkUniversalForwarder\etc\system\default\)
MSI (s) (54:B4) [16:04:27:983]: Executing op: FileCopy(SourceName=iojg0hhj.con|props.conf,SourceCabKey=fil6D851D169D614E39F6E9C37109CA1D44,DestName=props.conf,Attributes=512,FileSize=29643,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=1565119900,HashPart2=1866172744,HashPart3=1491796332,HashPart4=-1835111507,,)
MSI (s) (54:B4) [16:04:27:983]: File: C:\Program Files\SplunkUniversalForwarder\etc\system\default\props.conf; To be installed; Won't patch; No existing file
MSI (s) (54:B4) [16:04:27:983]: Source for file 'fil6D851D169D614E39F6E9C37109CA1D44' is compressed
InstallFiles: File: props.conf, Directory: C:\Program Files\SplunkUniversalForwarder\etc\system\default\, Size: 29643
MSI (s) (54:B4) [16:04:27:983]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\share\splunk\3rdparty\)
MSI (s) (54:B4) [16:04:27:983]: Executing op: SetSourceFolder(Folder=1\w89duo8g\share\splunk\3rdparty\|SplunkUniversalForwarder\share\splunk\3rdparty\)
MSI (s) (54:B4) [16:04:27:983]: Executing op: FileCopy(SourceName=akmxuasm.txt|Copyright-for-openldap-2.4.35.txt,SourceCabKey=fil6E2D14BD4493EBFE086FCC5C47EC823E,DestName=Copyright-for-openldap-2.4.35.txt,Attributes=512,FileSize=2214,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=-284738283,HashPart2=927607813,HashPart3=1002633896,HashPart4=1914241990,,)
MSI (s) (54:B4) [16:04:27:983]: File: C:\Program Files\SplunkUniversalForwarder\share\splunk\3rdparty\Copyright-for-openldap-2.4.35.txt; To be installed; Won't patch; No existing file
MSI (s) (54:B4) [16:04:27:983]: Source for file 'fil6E2D14BD4493EBFE086FCC5C47EC823E' is compressed
InstallFiles: File: Copyright-for-openldap-2.4.35.txt, Directory: C:\Program Files\SplunkUniversalForwarder\share\splunk\3rdparty\, Size: 2214
MSI (s) (54:B4) [16:04:27:983]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\bin\)
MSI (s) (54:B4) [16:04:27:983]: Executing op: SetSourceFolder(Folder=1\w89duo8g\bin\|SplunkUniversalForwarder\bin\)
MSI (s) (54:B4) [16:04:27:983]: Executing op: FileCopy(SourceName=wzweqyz8.inf|SplunkMonitorNoHandledrv-win7.inf,SourceCabKey=fil6ECE45D688742752D00A1D929DB75564,DestName=SplunkMonitorNoHandledrv-win7.inf,Attributes=512,FileSize=3575,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=1182119214,HashPart2=1664246505,HashPart3=-34699028,HashPart4=-259331338,,)
MSI (s) (54:B4) [16:04:27:983]: File: C:\Program Files\SplunkUniversalForwarder\bin\SplunkMonitorNoHandledrv-win7.inf; To be installed; Won't patch; No existing file
MSI (s) (54:B4) [16:04:27:983]: Source for file 'fil6ECE45D688742752D00A1D929DB75564' is compressed
InstallFiles: File: SplunkMonitorNoHandledrv-win7.inf, Directory: C:\Program Files\SplunkUniversalForwarder\bin\, Size: 3575
MSI (s) (54:B4) [16:04:27:983]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\etc\apps\search\default\)
MSI (s) (54:B4) [16:04:27:983]: Executing op: SetSourceFolder(Folder=1\w89duo8g\etc\apps\search\default\|SplunkUniversalForwarder\etc\apps\search\default\)
MSI (s) (54:B4) [16:04:27:983]: Executing op: FileCopy(SourceName=p0iplssh.con|app.conf,SourceCabKey=fil71A9C98E1F38D07926B319D33B71B400,DestName=app.conf,Attributes=512,FileSize=557,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=1875759321,HashPart2=-2026314734,HashPart3=-1951061505,HashPart4=-1324213630,,)
MSI (s) (54:B4) [16:04:27:983]: File: C:\Program Files\SplunkUniversalForwarder\etc\apps\search\default\app.conf; To be installed; Won't patch; No existing file
MSI (s) (54:B4) [16:04:27:983]: Source for file 'fil71A9C98E1F38D07926B319D33B71B400' is compressed
InstallFiles: File: app.conf, Directory: C:\Program Files\SplunkUniversalForwarder\etc\apps\search\default\, Size: 557
MSI (s) (54:B4) [16:04:27:983]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\etc\system\README\)
MSI (s) (54:B4) [16:04:27:983]: Executing op: SetSourceFolder(Folder=1\w89duo8g\etc\system\README\|SplunkUniversalForwarder\etc\system\README\)
MSI (s) (54:B4) [16:04:27:983]: Executing op: FileCopy(SourceName=kb7kgtqp.exa|serverclass.seed.xml.example,SourceCabKey=fil71F90DC8AF815CC0F5EC83884DFF6CD0,DestName=serverclass.seed.xml.example,Attributes=512,FileSize=1520,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=616966844,HashPart2=542149760,HashPart3=-1374634414,HashPart4=628014539,,)
MSI (s) (54:B4) [16:04:27:983]: File: C:\Program Files\SplunkUniversalForwarder\etc\system\README\serverclass.seed.xml.example; To be installed; Won't patch; No existing file
MSI (s) (54:B4) [16:04:27:983]: Source for file 'fil71F90DC8AF815CC0F5EC83884DFF6CD0' is compressed
InstallFiles: File: serverclass.seed.xml.example, Directory: C:\Program Files\SplunkUniversalForwarder\etc\system\README\, Size: 1520
MSI (s) (54:B4) [16:04:27:983]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\etc\)
MSI (s) (54:B4) [16:04:27:983]: Executing op: SetSourceFolder(Folder=1\w89duo8g\etc\|SplunkUniversalForwarder\etc\)
MSI (s) (54:B4) [16:04:27:983]: Executing op: FileCopy(SourceName=datetime.xml,SourceCabKey=fil721273CDDA8EA5EFB020C4BF508F538A,DestName=datetime.xml,Attributes=512,FileSize=8403,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=1762576992,HashPart2=1824316266,HashPart3=324421312,HashPart4=1335805861,,)
MSI (s) (54:B4) [16:04:27:983]: File: C:\Program Files\SplunkUniversalForwarder\etc\datetime.xml; To be installed; Won't patch; No existing file
MSI (s) (54:B4) [16:04:27:983]: Source for file 'fil721273CDDA8EA5EFB020C4BF508F538A' is compressed
InstallFiles: File: datetime.xml, Directory: C:\Program Files\SplunkUniversalForwarder\etc\, Size: 8403
MSI (s) (54:B4) [16:04:27:998]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\etc\system\default\)
MSI (s) (54:B4) [16:04:27:998]: Executing op: SetSourceFolder(Folder=1\w89duo8g\etc\system\default\|SplunkUniversalForwarder\etc\system\default\)
MSI (s) (54:B4) [16:04:27:998]: Executing op: FileCopy(SourceName=t3ubt9xq.con|app.conf,SourceCabKey=fil721E1308FA4515379144618EDC5BE0D1,DestName=app.conf,Attributes=512,FileSize=1881,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=586300028,HashPart2=-594969094,HashPart3=-67674650,HashPart4=-278748274,,)
MSI (s) (54:B4) [16:04:27:998]: File: C:\Program Files\SplunkUniversalForwarder\etc\system\default\app.conf; To be installed; Won't patch; No existing file
MSI (s) (54:B4) [16:04:27:998]: Source for file 'fil721E1308FA4515379144618EDC5BE0D1' is compressed
InstallFiles: File: app.conf, Directory: C:\Program Files\SplunkUniversalForwarder\etc\system\default\, Size: 1881
MSI (s) (54:B4) [16:04:27:998]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\etc\system\README\)
MSI (s) (54:B4) [16:04:27:998]: Executing op: SetSourceFolder(Folder=1\w89duo8g\etc\system\README\|SplunkUniversalForwarder\etc\system\README\)
MSI (s) (54:B4) [16:04:27:998]: Executing op: FileCopy(SourceName=ga484zpl.exa|literals.conf.example,SourceCabKey=fil725395DFB158C935B9753745782FC031,DestName=literals.conf.example,Attributes=512,FileSize=699,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=-51898232,HashPart2=353599692,HashPart3=1956389431,HashPart4=-1803848803,,)
MSI (s) (54:B4) [16:04:27:998]: File: C:\Program Files\SplunkUniversalForwarder\etc\system\README\literals.conf.example; To be installed; Won't patch; No existing file
MSI (s) (54:B4) [16:04:27:998]: Source for file 'fil725395DFB158C935B9753745782FC031' is compressed
InstallFiles: File: literals.conf.example, Directory: C:\Program Files\SplunkUniversalForwarder\etc\system\README\, Size: 699
MSI (s) (54:B4) [16:04:27:998]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\bin\)
MSI (s) (54:B4) [16:04:27:998]: Executing op: SetSourceFolder(Folder=1\w89duo8g\bin\|SplunkUniversalForwarder\bin\)
MSI (s) (54:B4) [16:04:27:998]: Executing op: FileCopy(SourceName=euqpfxv5.cat|splunkdrv.cat,SourceCabKey=fil73F0F3AD642EB6F037DF77AA728C972A,DestName=splunkdrv.cat,Attributes=512,FileSize=6246,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=-863334886,HashPart2=-626850488,HashPart3=-1271858174,HashPart4=-1360414277,,)
MSI (s) (54:B4) [16:04:27:998]: File: C:\Program Files\SplunkUniversalForwarder\bin\splunkdrv.cat; To be installed; Won't patch; No existing file
MSI (s) (54:B4) [16:04:27:998]: Source for file 'fil73F0F3AD642EB6F037DF77AA728C972A' is compressed
InstallFiles: File: splunkdrv.cat, Directory: C:\Program Files\SplunkUniversalForwarder\bin\, Size: 6246
MSI (s) (54:B4) [16:04:27:998]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\share\splunk\)
MSI (s) (54:B4) [16:04:27:998]: Executing op: SetSourceFolder(Folder=1\w89duo8g\share\splunk\|SplunkUniversalForwarder\share\splunk\)
MSI (s) (54:B4) [16:04:27:998]: Executing op: FileCopy(SourceName=mcsobril.tzp|zoneinfo.tzpack,SourceCabKey=fil75E0A0D6A8502D15BDACE36A10D4D4C5,DestName=zoneinfo.tzpack,Attributes=512,FileSize=560836,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=-472607671,HashPart2=-2079423330,HashPart3=-2085918648,HashPart4=-1637170527,,)
MSI (s) (54:B4) [16:04:27:998]: File: C:\Program Files\SplunkUniversalForwarder\share\splunk\zoneinfo.tzpack; To be installed; Won't patch; No existing file
MSI (s) (54:B4) [16:04:27:998]: Source for file 'fil75E0A0D6A8502D15BDACE36A10D4D4C5' is compressed
InstallFiles: File: zoneinfo.tzpack, Directory: C:\Program Files\SplunkUniversalForwarder\share\splunk\, Size: 560836
MSI (s) (54:B4) [16:04:27:998]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\bin\)
MSI (s) (54:B4) [16:04:27:998]: Executing op: SetSourceFolder(Folder=1\w89duo8g\bin\|SplunkUniversalForwarder\bin\)
MSI (s) (54:B4) [16:04:27:998]: Executing op: FileCopy(SourceName=svmr6m3j.exe|splunk-wmi.exe,SourceCabKey=fil7780CBD22DE9DA1923426EF05BBFD2B0,DestName=splunk-wmi.exe,Attributes=512,FileSize=11957480,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=1538.512.0.58998,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (54:B4) [16:04:27:998]: File: C:\Program Files\SplunkUniversalForwarder\bin\splunk-wmi.exe; To be installed; Won't patch; No existing file
MSI (s) (54:B4) [16:04:27:998]: Source for file 'fil7780CBD22DE9DA1923426EF05BBFD2B0' is compressed
InstallFiles: File: splunk-wmi.exe, Directory: C:\Program Files\SplunkUniversalForwarder\bin\, Size: 11957480
MSI (s) (54:B4) [16:04:28:092]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\share\splunk\3rdparty\)
MSI (s) (54:B4) [16:04:28:092]: Executing op: SetSourceFolder(Folder=1\w89duo8g\share\splunk\3rdparty\|SplunkUniversalForwarder\share\splunk\3rdparty\)
MSI (s) (54:B4) [16:04:28:092]: Executing op: FileCopy(SourceName=exafse0-.txt|Copyright-for-srm-1.2.11.txt,SourceCabKey=fil7BE38CB8FA27C33D71ABFB6C2D1466BE,DestName=Copyright-for-srm-1.2.11.txt,Attributes=512,FileSize=1338,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=-1145005695,HashPart2=-1076876277,HashPart3=516433128,HashPart4=-1197644949,,)
MSI (s) (54:B4) [16:04:28:092]: File: C:\Program Files\SplunkUniversalForwarder\share\splunk\3rdparty\Copyright-for-srm-1.2.11.txt; To be installed; Won't patch; No existing file
MSI (s) (54:B4) [16:04:28:092]: Source for file 'fil7BE38CB8FA27C33D71ABFB6C2D1466BE' is compressed
InstallFiles: File: Copyright-for-srm-1.2.11.txt, Directory: C:\Program Files\SplunkUniversalForwarder\share\splunk\3rdparty\, Size: 1338
MSI (s) (54:B4) [16:04:28:092]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\etc\system\README\)
MSI (s) (54:B4) [16:04:28:092]: Executing op: SetSourceFolder(Folder=1\w89duo8g\etc\system\README\|SplunkUniversalForwarder\etc\system\README\)
MSI (s) (54:B4) [16:04:28:092]: Executing op: FileCopy(SourceName=psz6ruvo.spe|source-classifier.conf.spec,SourceCabKey=fil7DE657C3850B8FACFA7FDC1D2637E78B,DestName=source-classifier.conf.spec,Attributes=512,FileSize=1152,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=944935019,HashPart2=1994965670,HashPart3=-773453845,HashPart4=-517665559,,)
MSI (s) (54:B4) [16:04:28:092]: File: C:\Program Files\SplunkUniversalForwarder\etc\system\README\source-classifier.conf.spec; To be installed; Won't patch; No existing file
MSI (s) (54:B4) [16:04:28:092]: Source for file 'fil7DE657C3850B8FACFA7FDC1D2637E78B' is compressed
InstallFiles: File: source-classifier.conf.spec, Directory: C:\Program Files\SplunkUniversalForwarder\etc\system\README\, Size: 1152
MSI (s) (54:B4) [16:04:28:092]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\bin\scripts\)
MSI (s) (54:B4) [16:04:28:092]: Executing op: SetSourceFolder(Folder=1\w89duo8g\bin\scripts\|SplunkUniversalForwarder\bin\scripts\)
MSI (s) (54:B4) [16:04:28:092]: Executing op: FileCopy(SourceName=5umkexzk.pat|splunk-winevtlog.path,SourceCabKey=fil7F23E06AC0B91DEB08A6BD38DB4E7E0E,DestName=splunk-winevtlog.path,Attributes=512,FileSize=39,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=-284320144,HashPart2=-1045298961,HashPart3=1119129011,HashPart4=1477880464,,)
MSI (s) (54:B4) [16:04:28:092]: File: C:\Program Files\SplunkUniversalForwarder\bin\scripts\splunk-winevtlog.path; To be installed; Won't patch; No existing file
MSI (s) (54:B4) [16:04:28:092]: Source for file 'fil7F23E06AC0B91DEB08A6BD38DB4E7E0E' is compressed
InstallFiles: File: splunk-winevtlog.path, Directory: C:\Program Files\SplunkUniversalForwarder\bin\scripts\, Size: 39
MSI (s) (54:B4) [16:04:28:092]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\bin\)
MSI (s) (54:B4) [16:04:28:092]: Executing op: SetSourceFolder(Folder=1\w89duo8g\bin\|SplunkUniversalForwarder\bin\)
MSI (s) (54:B4) [16:04:28:092]: Executing op: FileCopy(SourceName=08iymcza.sys|splknetdrv-win8.sys,SourceCabKey=fil7FB0C1F4097446A596A1A3A4A9BDEEDB,DestName=splknetdrv-win8.sys,Attributes=512,FileSize=41440,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=6.2.9200.16384,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (54:B4) [16:04:28:092]: File: C:\Program Files\SplunkUniversalForwarder\bin\splknetdrv-win8.sys; To be installed; Won't patch; No existing file
MSI (s) (54:B4) [16:04:28:092]: Source for file 'fil7FB0C1F4097446A596A1A3A4A9BDEEDB' is compressed
InstallFiles: File: splknetdrv-win8.sys, Directory: C:\Program Files\SplunkUniversalForwarder\bin\, Size: 41440
MSI (s) (54:B4) [16:04:28:092]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\etc\system\README\)
MSI (s) (54:B4) [16:04:28:092]: Executing op: SetSourceFolder(Folder=1\w89duo8g\etc\system\README\|SplunkUniversalForwarder\etc\system\README\)
MSI (s) (54:B4) [16:04:28:092]: Executing op: FileCopy(SourceName=_k1y0-fv.exa|user-seed.conf.example,SourceCabKey=fil7FFE53DE47BA1CB552377DBCDB52D132,DestName=user-seed.conf.example,Attributes=512,FileSize=699,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=-1461043121,HashPart2=755367589,HashPart3=-611619178,HashPart4=1446997285,,)
MSI (s) (54:B4) [16:04:28:092]: File: C:\Program Files\SplunkUniversalForwarder\etc\system\README\user-seed.conf.example; To be installed; Won't patch; No existing file
MSI (s) (54:B4) [16:04:28:092]: Source for file 'fil7FFE53DE47BA1CB552377DBCDB52D132' is compressed
InstallFiles: File: user-seed.conf.example, Directory: C:\Program Files\SplunkUniversalForwarder\etc\system\README\, Size: 699
MSI (s) (54:B4) [16:04:28:108]: Executing op: FileCopy(SourceName=xktdxjuv.exa|audit.conf.example,SourceCabKey=fil8333B7C1AE70E87455B542B85017A4C9,DestName=audit.conf.example,Attributes=512,FileSize=2573,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=658296867,HashPart2=-713146312,HashPart3=-779807503,HashPart4=-1952144697,,)
MSI (s) (54:B4) [16:04:28:108]: File: C:\Program Files\SplunkUniversalForwarder\etc\system\README\audit.conf.example; To be installed; Won't patch; No existing file
MSI (s) (54:B4) [16:04:28:108]: Source for file 'fil8333B7C1AE70E87455B542B85017A4C9' is compressed
InstallFiles: File: audit.conf.example, Directory: C:\Program Files\SplunkUniversalForwarder\etc\system\README\, Size: 2573
MSI (s) (54:B4) [16:04:28:108]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\share\splunk\3rdparty\)
MSI (s) (54:B4) [16:04:28:108]: Executing op: SetSourceFolder(Folder=1\w89duo8g\share\splunk\3rdparty\|SplunkUniversalForwarder\share\splunk\3rdparty\)
MSI (s) (54:B4) [16:04:28:108]: Executing op: FileCopy(SourceName=1bhpypt3.txt|Copyright-for-nedmalloc.txt,SourceCabKey=fil8386E91ACEB19D3FA5928DCA9401DE2A,DestName=Copyright-for-nedmalloc.txt,Attributes=512,FileSize=1361,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=-27782987,HashPart2=413604525,HashPart3=664123200,HashPart4=1040039925,,)
MSI (s) (54:B4) [16:04:28:108]: File: C:\Program Files\SplunkUniversalForwarder\share\splunk\3rdparty\Copyright-for-nedmalloc.txt; To be installed; Won't patch; No existing file
MSI (s) (54:B4) [16:04:28:108]: Source for file 'fil8386E91ACEB19D3FA5928DCA9401DE2A' is compressed
InstallFiles: File: Copyright-for-nedmalloc.txt, Directory: C:\Program Files\SplunkUniversalForwarder\share\splunk\3rdparty\, Size: 1361
MSI (s) (54:B4) [16:04:28:108]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\etc\modules\input\exec\)
MSI (s) (54:B4) [16:04:28:108]: Executing op: SetSourceFolder(Folder=1\w89duo8g\etc\modules\input\exec\|SplunkUniversalForwarder\etc\modules\input\exec\)
MSI (s) (54:B4) [16:04:28:108]: Executing op: FileCopy(SourceName=config.xml,SourceCabKey=fil8426DEA3E955D272F007EB08F719639B,DestName=config.xml,Attributes=512,FileSize=369,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=1007827371,HashPart2=840197801,HashPart3=1749132142,HashPart4=-89350849,,)
MSI (s) (54:B4) [16:04:28:108]: File: C:\Program Files\SplunkUniversalForwarder\etc\modules\input\exec\config.xml; To be installed; Won't patch; No existing file
MSI (s) (54:B4) [16:04:28:108]: Source for file 'fil8426DEA3E955D272F007EB08F719639B' is compressed
InstallFiles: File: config.xml, Directory: C:\Program Files\SplunkUniversalForwarder\etc\modules\input\exec\, Size: 369
MSI (s) (54:B4) [16:04:28:108]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\bin\)
MSI (s) (54:B4) [16:04:28:108]: Executing op: SetSourceFolder(Folder=1\w89duo8g\bin\|SplunkUniversalForwarder\bin\)
MSI (s) (54:B4) [16:04:28:108]: Executing op: FileCopy(SourceName=fqmo4ng7.exe|splunk-compresstool.exe,SourceCabKey=fil844841490B27383F5BD1AAA6BB54CEB6,DestName=splunk-compresstool.exe,Attributes=512,FileSize=69864,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=1538.512.0.58998,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (54:B4) [16:04:28:108]: File: C:\Program Files\SplunkUniversalForwarder\bin\splunk-compresstool.exe; To be installed; Won't patch; No existing file
MSI (s) (54:B4) [16:04:28:108]: Source for file 'fil844841490B27383F5BD1AAA6BB54CEB6' is compressed
InstallFiles: File: splunk-compresstool.exe, Directory: C:\Program Files\SplunkUniversalForwarder\bin\, Size: 69864
MSI (s) (54:B4) [16:04:28:108]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\etc\system\README\)
MSI (s) (54:B4) [16:04:28:108]: Executing op: SetSourceFolder(Folder=1\w89duo8g\etc\system\README\|SplunkUniversalForwarder\etc\system\README\)
MSI (s) (54:B4) [16:04:28:108]: Executing op: FileCopy(SourceName=z7fvv8zm.exa|outputs.conf.example,SourceCabKey=fil8644E441B78A6EEFE67F890162B9163F,DestName=outputs.conf.example,Attributes=512,FileSize=4959,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=1143978327,HashPart2=-1857881894,HashPart3=-340856147,HashPart4=-1605104723,,)
MSI (s) (54:B4) [16:04:28:108]: File: C:\Program Files\SplunkUniversalForwarder\etc\system\README\outputs.conf.example; To be installed; Won't patch; No existing file
MSI (s) (54:B4) [16:04:28:108]: Source for file 'fil8644E441B78A6EEFE67F890162B9163F' is compressed
InstallFiles: File: outputs.conf.example, Directory: C:\Program Files\SplunkUniversalForwarder\etc\system\README\, Size: 4959
MSI (s) (54:B4) [16:04:28:108]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\bin\)
MSI (s) (54:B4) [16:04:28:108]: Executing op: SetSourceFolder(Folder=1\w89duo8g\bin\|SplunkUniversalForwarder\bin\)
MSI (s) (54:B4) [16:04:28:108]: Executing op: FileCopy(SourceName=mwdvtlyg.cat|splknetdrv-vista.cat,SourceCabKey=fil87AB6D8C000B09860E1E5DED7E4D7755,DestName=splknetdrv-vista.cat,Attributes=512,FileSize=6245,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=1166141235,HashPart2=617270825,HashPart3=-1511882730,HashPart4=1223772634,,)
MSI (s) (54:B4) [16:04:28:108]: File: C:\Program Files\SplunkUniversalForwarder\bin\splknetdrv-vista.cat; To be installed; Won't patch; No existing file
MSI (s) (54:B4) [16:04:28:108]: Source for file 'fil87AB6D8C000B09860E1E5DED7E4D7755' is compressed
InstallFiles: File: splknetdrv-vista.cat, Directory: C:\Program Files\SplunkUniversalForwarder\bin\, Size: 6245
MSI (s) (54:B4) [16:04:28:108]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\etc\auth\)
MSI (s) (54:B4) [16:04:28:108]: Executing op: SetSourceFolder(Folder=1\w89duo8g\etc\auth\|SplunkUniversalForwarder\etc\auth\)
MSI (s) (54:B4) [16:04:28:108]: Executing op: FileCopy(SourceName=qzvxswyw.def|cacert.pem.default,SourceCabKey=fil899A3448B283B41D367BA3A410E5DD5B,DestName=cacert.pem.default,Attributes=512,FileSize=928,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=198531799,HashPart2=592906671,HashPart3=-1326191252,HashPart4=606930647,,)
MSI (s) (54:B4) [16:04:28:108]: File: C:\Program Files\SplunkUniversalForwarder\etc\auth\cacert.pem.default; To be installed; Won't patch; No existing file
MSI (s) (54:B4) [16:04:28:108]: Source for file 'fil899A3448B283B41D367BA3A410E5DD5B' is compressed
InstallFiles: File: cacert.pem.default, Directory: C:\Program Files\SplunkUniversalForwarder\etc\auth\, Size: 928
MSI (s) (54:B4) [16:04:28:108]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\bin\)
MSI (s) (54:B4) [16:04:28:108]: Executing op: SetSourceFolder(Folder=1\w89duo8g\bin\|SplunkUniversalForwarder\bin\)
MSI (s) (54:B4) [16:04:28:108]: Executing op: FileCopy(SourceName=openssl.exe,SourceCabKey=fil89AA30BB7AC8542D777736B2C689A25B,DestName=openssl.exe,Attributes=512,FileSize=473832,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=1233656678,HashPart2=2134760425,HashPart3=-378340961,HashPart4=370030964,,)
MSI (s) (54:B4) [16:04:28:108]: File: C:\Program Files\SplunkUniversalForwarder\bin\openssl.exe; To be installed; Won't patch; No existing file
MSI (s) (54:B4) [16:04:28:108]: Source for file 'fil89AA30BB7AC8542D777736B2C689A25B' is compressed
InstallFiles: File: openssl.exe, Directory: C:\Program Files\SplunkUniversalForwarder\bin\, Size: 473832
MSI (s) (54:B4) [16:04:28:123]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\etc\system\default\)
MSI (s) (54:B4) [16:04:28:123]: Executing op: SetSourceFolder(Folder=1\w89duo8g\etc\system\default\|SplunkUniversalForwarder\etc\system\default\)
MSI (s) (54:B4) [16:04:28:123]: Executing op: FileCopy(SourceName=dv9ondio.con|source-classifier.conf,SourceCabKey=fil8A5EC3DC54B9673F1908EAF16ECF75B2,DestName=source-classifier.conf,Attributes=512,FileSize=38132,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=1287361602,HashPart2=-1496227011,HashPart3=-46448183,HashPart4=1301634637,,)
MSI (s) (54:B4) [16:04:28:123]: File: C:\Program Files\SplunkUniversalForwarder\etc\system\default\source-classifier.conf; To be installed; Won't patch; No existing file
MSI (s) (54:B4) [16:04:28:123]: Source for file 'fil8A5EC3DC54B9673F1908EAF16ECF75B2' is compressed
InstallFiles: File: source-classifier.conf, Directory: C:\Program Files\SplunkUniversalForwarder\etc\system\default\, Size: 38132
MSI (s) (54:B4) [16:04:28:123]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\etc\system\README\)
MSI (s) (54:B4) [16:04:28:123]: Executing op: SetSourceFolder(Folder=1\w89duo8g\etc\system\README\|SplunkUniversalForwarder\etc\system\README\)
MSI (s) (54:B4) [16:04:28:123]: Executing op: FileCopy(SourceName=e--r6wih.spe|wmi.conf.spec,SourceCabKey=fil8B6D89F009DEADD75007D85D0F29F045,DestName=wmi.conf.spec,Attributes=512,FileSize=6369,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=1333709962,HashPart2=-2046189838,HashPart3=-925162855,HashPart4=-525180819,,)
MSI (s) (54:B4) [16:04:28:123]: File: C:\Program Files\SplunkUniversalForwarder\etc\system\README\wmi.conf.spec; To be installed; Won't patch; No existing file
MSI (s) (54:B4) [16:04:28:123]: Source for file 'fil8B6D89F009DEADD75007D85D0F29F045' is compressed
InstallFiles: File: wmi.conf.spec, Directory: C:\Program Files\SplunkUniversalForwarder\etc\system\README\, Size: 6369
MSI (s) (54:B4) [16:04:28:123]: Executing op: FileCopy(SourceName=oq2jyv51.spe|web.conf.spec,SourceCabKey=fil8C95D6E67234F683AF93D1E26D485A58,DestName=web.conf.spec,Attributes=512,FileSize=40083,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=-1039232217,HashPart2=1789345805,HashPart3=515059316,HashPart4=-1161564493,,)
MSI (s) (54:B4) [16:04:28:123]: File: C:\Program Files\SplunkUniversalForwarder\etc\system\README\web.conf.spec; To be installed; Won't patch; No existing file
MSI (s) (54:B4) [16:04:28:123]: Source for file 'fil8C95D6E67234F683AF93D1E26D485A58' is compressed
InstallFiles: File: web.conf.spec, Directory: C:\Program Files\SplunkUniversalForwarder\etc\system\README\, Size: 40083
MSI (s) (54:B4) [16:04:28:123]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\)
MSI (s) (54:B4) [16:04:28:123]: Executing op: SetSourceFolder(Folder=1\w89duo8g\|SplunkUniversalForwarder\)
MSI (s) (54:B4) [16:04:28:123]: Executing op: FileCopy(SourceName=openssl.cnf,SourceCabKey=fil8D54D343945FDB954A6C9465DA88549F,DestName=openssl.cnf,Attributes=512,FileSize=10835,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=1353396686,HashPart2=-148143083,HashPart3=345347010,HashPart4=-455068506,,)
MSI (s) (54:B4) [16:04:28:123]: File: C:\Program Files\SplunkUniversalForwarder\openssl.cnf; To be installed; Won't patch; No existing file
MSI (s) (54:B4) [16:04:28:123]: Source for file 'fil8D54D343945FDB954A6C9465DA88549F' is compressed
InstallFiles: File: openssl.cnf, Directory: C:\Program Files\SplunkUniversalForwarder\, Size: 10835
MSI (s) (54:B4) [16:04:28:123]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\etc\system\default\)
MSI (s) (54:B4) [16:04:28:123]: Executing op: SetSourceFolder(Folder=1\w89duo8g\etc\system\default\|SplunkUniversalForwarder\etc\system\default\)
MSI (s) (54:B4) [16:04:28:123]: Executing op: FileCopy(SourceName=jjiv_uze.con|literals.conf,SourceCabKey=fil8D818120B2094F3B4F38A803672F614A,DestName=literals.conf,Attributes=512,FileSize=84900,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=-1122447672,HashPart2=1269138076,HashPart3=-105158467,HashPart4=-650700869,,)
MSI (s) (54:B4) [16:04:28:123]: File: C:\Program Files\SplunkUniversalForwarder\etc\system\default\literals.conf; To be installed; Won't patch; No existing file
MSI (s) (54:B4) [16:04:28:123]: Source for file 'fil8D818120B2094F3B4F38A803672F614A' is compressed
InstallFiles: File: literals.conf, Directory: C:\Program Files\SplunkUniversalForwarder\etc\system\default\, Size: 84900
MSI (s) (54:B4) [16:04:28:123]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\bin\scripts\)
MSI (s) (54:B4) [16:04:28:123]: Executing op: SetSourceFolder(Folder=1\w89duo8g\bin\scripts\|SplunkUniversalForwarder\bin\scripts\)
MSI (s) (54:B4) [16:04:28:123]: Executing op: FileCopy(SourceName=qxpzu4em.pat|splunk-regmon.path,SourceCabKey=fil8D9F7FA02E8FDCF331B93C44862E82E2,DestName=splunk-regmon.path,Attributes=512,FileSize=36,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=1904713382,HashPart2=-2102727911,HashPart3=-718476847,HashPart4=1720899368,,)
MSI (s) (54:B4) [16:04:28:123]: File: C:\Program Files\SplunkUniversalForwarder\bin\scripts\splunk-regmon.path; To be installed; Won't patch; No existing file
MSI (s) (54:B4) [16:04:28:123]: Source for file 'fil8D9F7FA02E8FDCF331B93C44862E82E2' is compressed
InstallFiles: File: splunk-regmon.path, Directory: C:\Program Files\SplunkUniversalForwarder\bin\scripts\, Size: 36
MSI (s) (54:B4) [16:04:28:139]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\)
MSI (s) (54:B4) [16:04:28:139]: Executing op: SetSourceFolder(Folder=1\w89duo8g\|SplunkUniversalForwarder\)
MSI (s) (54:B4) [16:04:28:139]: Executing op: FileCopy(SourceName=ftr,SourceCabKey=fil8E867683EEE07795ADE9CADFD260F76F,DestName=ftr,Attributes=512,FileSize=0,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=0,HashPart2=0,HashPart3=0,HashPart4=0,,)
MSI (s) (54:B4) [16:04:28:139]: File: C:\Program Files\SplunkUniversalForwarder\ftr; To be installed; Won't patch; No existing file
MSI (s) (54:B4) [16:04:28:139]: Source for file 'fil8E867683EEE07795ADE9CADFD260F76F' is compressed
InstallFiles: File: ftr, Directory: C:\Program Files\SplunkUniversalForwarder\, Size: 0
MSI (s) (54:B4) [16:04:28:139]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\etc\modules\input\fschangemanager\)
MSI (s) (54:B4) [16:04:28:139]: Executing op: SetSourceFolder(Folder=1\w89duo8g\etc\modules\input\8aifimk6\|SplunkUniversalForwarder\etc\modules\input\fschangemanager\)
MSI (s) (54:B4) [16:04:28:139]: Executing op: FileCopy(SourceName=config.xml,SourceCabKey=fil8FB766132BE092C1597A2328EEEC9750,DestName=config.xml,Attributes=512,FileSize=594,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=-1698912489,HashPart2=-1961402887,HashPart3=1728853231,HashPart4=1987194350,,)
MSI (s) (54:B4) [16:04:28:139]: File: C:\Program Files\SplunkUniversalForwarder\etc\modules\input\fschangemanager\config.xml; To be installed; Won't patch; No existing file
MSI (s) (54:B4) [16:04:28:139]: Source for file 'fil8FB766132BE092C1597A2328EEEC9750' is compressed
InstallFiles: File: config.xml, Directory: C:\Program Files\SplunkUniversalForwarder\etc\modules\input\fschangemanager\, Size: 594
MSI (s) (54:B4) [16:04:28:139]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\etc\system\default\)
MSI (s) (54:B4) [16:04:28:139]: Executing op: SetSourceFolder(Folder=1\w89duo8g\etc\system\default\|SplunkUniversalForwarder\etc\system\default\)
MSI (s) (54:B4) [16:04:28:139]: Executing op: FileCopy(SourceName=c_pbn1dh.con|limits.conf,SourceCabKey=fil90FC8766281688DC3C91F72FD852418B,DestName=limits.conf,Attributes=512,FileSize=19786,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=386255876,HashPart2=-523253297,HashPart3=-296102742,HashPart4=-39354288,,)
MSI (s) (54:B4) [16:04:28:139]: File: C:\Program Files\SplunkUniversalForwarder\etc\system\default\limits.conf; To be installed; Won't patch; No existing file
MSI (s) (54:B4) [16:04:28:139]: Source for file 'fil90FC8766281688DC3C91F72FD852418B' is compressed
InstallFiles: File: limits.conf, Directory: C:\Program Files\SplunkUniversalForwarder\etc\system\default\, Size: 19786
MSI (s) (54:B4) [16:04:28:139]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\etc\system\README\)
MSI (s) (54:B4) [16:04:28:139]: Executing op: SetSourceFolder(Folder=1\w89duo8g\etc\system\README\|SplunkUniversalForwarder\etc\system\README\)
MSI (s) (54:B4) [16:04:28:139]: Executing op: FileCopy(SourceName=v96uemdy.exa|server.conf.example,SourceCabKey=fil9127E0DD95006110BEF6AD7B2D72B331,DestName=server.conf.example,Attributes=512,FileSize=2992,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=-1848149016,HashPart2=1413075889,HashPart3=-984623180,HashPart4=576610668,,)
MSI (s) (54:B4) [16:04:28:139]: File: C:\Program Files\SplunkUniversalForwarder\etc\system\README\server.conf.example; To be installed; Won't patch; No existing file
MSI (s) (54:B4) [16:04:28:139]: Source for file 'fil9127E0DD95006110BEF6AD7B2D72B331' is compressed
InstallFiles: File: server.conf.example, Directory: C:\Program Files\SplunkUniversalForwarder\etc\system\README\, Size: 2992
MSI (s) (54:B4) [16:04:28:139]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\etc\apps\SplunkUniversalForwarder\default\)
MSI (s) (54:B4) [16:04:28:139]: Executing op: SetSourceFolder(Folder=1\w89duo8g\etc\apps\0k4ci1p3\default\|SplunkUniversalForwarder\etc\apps\SplunkUniversalForwarder\default\)
MSI (s) (54:B4) [16:04:28:139]: Executing op: FileCopy(SourceName=vdqebws2.con|inputs.conf,SourceCabKey=fil927CDA155EF7735F5ED2FE8AA03F569A,DestName=inputs.conf,Attributes=512,FileSize=569,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=-1077806877,HashPart2=-293511554,HashPart3=-1263578010,HashPart4=-1631278403,,)
MSI (s) (54:B4) [16:04:28:139]: File: C:\Program Files\SplunkUniversalForwarder\etc\apps\SplunkUniversalForwarder\default\inputs.conf; To be installed; Won't patch; No existing file
MSI (s) (54:B4) [16:04:28:139]: Source for file 'fil927CDA155EF7735F5ED2FE8AA03F569A' is compressed
InstallFiles: File: inputs.conf, Directory: C:\Program Files\SplunkUniversalForwarder\etc\apps\SplunkUniversalForwarder\default\, Size: 569
MSI (s) (54:B4) [16:04:28:139]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\etc\system\README\)
MSI (s) (54:B4) [16:04:28:139]: Executing op: SetSourceFolder(Folder=1\w89duo8g\etc\system\README\|SplunkUniversalForwarder\etc\system\README\)
MSI (s) (54:B4) [16:04:28:139]: Executing op: FileCopy(SourceName=i5gxak87.spe|default.meta.spec,SourceCabKey=fil92F27DDF9C69985515585E96D2FBD68F,DestName=default.meta.spec,Attributes=512,FileSize=2313,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=1189779163,HashPart2=-2003668743,HashPart3=-283089548,HashPart4=-1853029241,,)
MSI (s) (54:B4) [16:04:28:139]: File: C:\Program Files\SplunkUniversalForwarder\etc\system\README\default.meta.spec; To be installed; Won't patch; No existing file
MSI (s) (54:B4) [16:04:28:139]: Source for file 'fil92F27DDF9C69985515585E96D2FBD68F' is compressed
InstallFiles: File: default.meta.spec, Directory: C:\Program Files\SplunkUniversalForwarder\etc\system\README\, Size: 2313
MSI (s) (54:B4) [16:04:28:139]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\)
MSI (s) (54:B4) [16:04:28:139]: Executing op: SetSourceFolder(Folder=1\w89duo8g\|SplunkUniversalForwarder\)
MSI (s) (54:B4) [16:04:28:139]: Executing op: FileCopy(SourceName=r6rozxpb.txt|license-eula.txt,SourceCabKey=fil9376A758C23E2BB13C80FE6B4CA1B5DC,DestName=license-eula.txt,Attributes=512,FileSize=53312,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=1654742755,HashPart2=1557339032,HashPart3=-1103810982,HashPart4=-199246675,,)
MSI (s) (54:B4) [16:04:28:139]: File: C:\Program Files\SplunkUniversalForwarder\license-eula.txt; To be installed; Won't patch; No existing file
MSI (s) (54:B4) [16:04:28:139]: Source for file 'fil9376A758C23E2BB13C80FE6B4CA1B5DC' is compressed
InstallFiles: File: license-eula.txt, Directory: C:\Program Files\SplunkUniversalForwarder\, Size: 53312
MSI (s) (54:B4) [16:04:28:139]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\bin\)
MSI (s) (54:B4) [16:04:28:139]: Executing op: SetSourceFolder(Folder=1\w89duo8g\bin\|SplunkUniversalForwarder\bin\)
MSI (s) (54:B4) [16:04:28:139]: Executing op: FileCopy(SourceName=_deetr65.exe|splunk-MonitorNoHandle.exe,SourceCabKey=fil93B202166A8D34A66D6EB7EBDC848097,DestName=splunk-MonitorNoHandle.exe,Attributes=512,FileSize=11951848,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=6.2.9200.16384,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (54:B4) [16:04:28:139]: File: C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe; To be installed; Won't patch; No existing file
MSI (s) (54:B4) [16:04:28:155]: Source for file 'fil93B202166A8D34A66D6EB7EBDC848097' is compressed
InstallFiles: File: splunk-MonitorNoHandle.exe, Directory: C:\Program Files\SplunkUniversalForwarder\bin\, Size: 11951848
MSI (s) (54:B4) [16:04:28:233]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\)
MSI (s) (54:B4) [16:04:28:233]: Executing op: SetSourceFolder(Folder=1\w89duo8g\|SplunkUniversalForwarder\)
MSI (s) (54:B4) [16:04:28:233]: Executing op: FileCopy(SourceName=zd32kcse.rtf|license-eula.rtf,SourceCabKey=fil93C77AB986AF8BCF1C073B94A387F755,DestName=license-eula.rtf,Attributes=512,FileSize=71732,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=1567761944,HashPart2=-1560847391,HashPart3=1316369274,HashPart4=731490489,,)
MSI (s) (54:B4) [16:04:28:233]: File: C:\Program Files\SplunkUniversalForwarder\license-eula.rtf; To be installed; Won't patch; No existing file
MSI (s) (54:B4) [16:04:28:233]: Source for file 'fil93C77AB986AF8BCF1C073B94A387F755' is compressed
InstallFiles: File: license-eula.rtf, Directory: C:\Program Files\SplunkUniversalForwarder\, Size: 71732
MSI (s) (54:B4) [16:04:28:233]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\etc\apps\search\default\)
MSI (s) (54:B4) [16:04:28:233]: Executing op: SetSourceFolder(Folder=1\w89duo8g\etc\apps\search\default\|SplunkUniversalForwarder\etc\apps\search\default\)
MSI (s) (54:B4) [16:04:28:233]: Executing op: FileCopy(SourceName=5_m0frwf.con|props.conf,SourceCabKey=fil9429DE1677F7E3426508F2BB2F4A21E6,DestName=props.conf,Attributes=512,FileSize=222,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=1613547240,HashPart2=1963857326,HashPart3=-616574,HashPart4=-1673334995,,)
MSI (s) (54:B4) [16:04:28:233]: File: C:\Program Files\SplunkUniversalForwarder\etc\apps\search\default\props.conf; To be installed; Won't patch; No existing file
MSI (s) (54:B4) [16:04:28:233]: Source for file 'fil9429DE1677F7E3426508F2BB2F4A21E6' is compressed
InstallFiles: File: props.conf, Directory: C:\Program Files\SplunkUniversalForwarder\etc\apps\search\default\, Size: 222
MSI (s) (54:B4) [16:04:28:233]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\bin\)
MSI (s) (54:B4) [16:04:28:233]: Executing op: SetSourceFolder(Folder=1\w89duo8g\bin\|SplunkUniversalForwarder\bin\)
MSI (s) (54:B4) [16:04:28:233]: Executing op: FileCopy(SourceName=enqy9e8s.inf|splknetdrv-win8.inf,SourceCabKey=fil944F7C263AC1D64968B1779406FE5865,DestName=splknetdrv-win8.inf,Attributes=512,FileSize=1846,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=659360546,HashPart2=-979738359,HashPart3=-167339412,HashPart4=1826164654,,)
MSI (s) (54:B4) [16:04:28:233]: File: C:\Program Files\SplunkUniversalForwarder\bin\splknetdrv-win8.inf; To be installed; Won't patch; No existing file
MSI (s) (54:B4) [16:04:28:233]: Source for file 'fil944F7C263AC1D64968B1779406FE5865' is compressed
InstallFiles: File: splknetdrv-win8.inf, Directory: C:\Program Files\SplunkUniversalForwarder\bin\, Size: 1846
MSI (s) (54:B4) [16:04:28:233]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\etc\system\README\)
MSI (s) (54:B4) [16:04:28:233]: Executing op: SetSourceFolder(Folder=1\w89duo8g\etc\system\README\|SplunkUniversalForwarder\etc\system\README\)
MSI (s) (54:B4) [16:04:28:233]: Executing op: FileCopy(SourceName=tthzutz9.exa|user-prefs.conf.example,SourceCabKey=fil9536F0304133363EBC45A56F6AA710D9,DestName=user-prefs.conf.example,Attributes=512,FileSize=760,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=368078116,HashPart2=1708392104,HashPart3=-1436668732,HashPart4=2005388608,,)
MSI (s) (54:B4) [16:04:28:233]: File: C:\Program Files\SplunkUniversalForwarder\etc\system\README\user-prefs.conf.example; To be installed; Won't patch; No existing file
MSI (s) (54:B4) [16:04:28:233]: Source for file 'fil9536F0304133363EBC45A56F6AA710D9' is compressed
InstallFiles: File: user-prefs.conf.example, Directory: C:\Program Files\SplunkUniversalForwarder\etc\system\README\, Size: 760
MSI (s) (54:B4) [16:04:28:233]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\bin\scripts\)
MSI (s) (54:B4) [16:04:28:233]: Executing op: SetSourceFolder(Folder=1\w89duo8g\bin\scripts\|SplunkUniversalForwarder\bin\scripts\)
MSI (s) (54:B4) [16:04:28:233]: Executing op: FileCopy(SourceName=0gcctx7l.pat|splunk-winhostmon.path,SourceCabKey=fil9578CE851CF08845DA1E0053D622E4E0,DestName=splunk-winhostmon.path,Attributes=512,FileSize=41,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=-1952854194,HashPart2=222971351,HashPart3=1706018830,HashPart4=349465897,,)
MSI (s) (54:B4) [16:04:28:233]: File: C:\Program Files\SplunkUniversalForwarder\bin\scripts\splunk-winhostmon.path; To be installed; Won't patch; No existing file
MSI (s) (54:B4) [16:04:28:233]: Source for file 'fil9578CE851CF08845DA1E0053D622E4E0' is compressed
InstallFiles: File: splunk-winhostmon.path, Directory: C:\Program Files\SplunkUniversalForwarder\bin\scripts\, Size: 41
MSI (s) (54:B4) [16:04:28:248]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\etc\system\README\)
MSI (s) (54:B4) [16:04:28:248]: Executing op: SetSourceFolder(Folder=1\w89duo8g\etc\system\README\|SplunkUniversalForwarder\etc\system\README\)
MSI (s) (54:B4) [16:04:28:248]: Executing op: FileCopy(SourceName=c2jxikof.exa|wmi.conf.example,SourceCabKey=fil95B6580AF9639830C6C15612D9A56B38,DestName=wmi.conf.example,Attributes=512,FileSize=3039,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=-1338074544,HashPart2=2075749494,HashPart3=1827043808,HashPart4=268800694,,)
MSI (s) (54:B4) [16:04:28:248]: File: C:\Program Files\SplunkUniversalForwarder\etc\system\README\wmi.conf.example; To be installed; Won't patch; No existing file
MSI (s) (54:B4) [16:04:28:248]: Source for file 'fil95B6580AF9639830C6C15612D9A56B38' is compressed
InstallFiles: File: wmi.conf.example, Directory: C:\Program Files\SplunkUniversalForwarder\etc\system\README\, Size: 3039
MSI (s) (54:B4) [16:04:28:248]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\share\splunk\3rdparty\)
MSI (s) (54:B4) [16:04:28:248]: Executing op: SetSourceFolder(Folder=1\w89duo8g\share\splunk\3rdparty\|SplunkUniversalForwarder\share\splunk\3rdparty\)
MSI (s) (54:B4) [16:04:28:248]: Executing op: FileCopy(SourceName=3ajl0grw.txt|Copyright-for-openssl-1.0.1k.txt,SourceCabKey=fil96905E32170414DCAB4D25F4F891DBB6,DestName=Copyright-for-openssl-1.0.1k.txt,Attributes=512,FileSize=6279,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=1761192185,HashPart2=-532319472,HashPart3=-1029154121,HashPart4=-931222804,,)
MSI (s) (54:B4) [16:04:28:248]: File: C:\Program Files\SplunkUniversalForwarder\share\splunk\3rdparty\Copyright-for-openssl-1.0.1k.txt; To be installed; Won't patch; No existing file
MSI (s) (54:B4) [16:04:28:248]: Source for file 'fil96905E32170414DCAB4D25F4F891DBB6' is compressed
InstallFiles: File: Copyright-for-openssl-1.0.1k.txt, Directory: C:\Program Files\SplunkUniversalForwarder\share\splunk\3rdparty\, Size: 6279
MSI (s) (54:B4) [16:04:28:248]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\)
MSI (s) (54:B4) [16:04:28:248]: Executing op: SetSourceFolder(Folder=1\w89duo8g\|SplunkUniversalForwarder\)
MSI (s) (54:B4) [16:04:28:248]: Executing op: FileCopy(SourceName=bw0km9ag.txt|copyright.txt,SourceCabKey=fil96B113E88E31A386264BA92B7F6B12EF,DestName=copyright.txt,Attributes=512,FileSize=58,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=-869762882,HashPart2=1582527905,HashPart3=1827730478,HashPart4=-420082666,,)
MSI (s) (54:B4) [16:04:28:248]: File: C:\Program Files\SplunkUniversalForwarder\copyright.txt; To be installed; Won't patch; No existing file
MSI (s) (54:B4) [16:04:28:248]: Source for file 'fil96B113E88E31A386264BA92B7F6B12EF' is compressed
InstallFiles: File: copyright.txt, Directory: C:\Program Files\SplunkUniversalForwarder\, Size: 58
MSI (s) (54:B4) [16:04:28:248]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\etc\system\default\)
MSI (s) (54:B4) [16:04:28:248]: Executing op: SetSourceFolder(Folder=1\w89duo8g\etc\system\default\|SplunkUniversalForwarder\etc\system\default\)
MSI (s) (54:B4) [16:04:28:248]: Executing op: FileCopy(SourceName=wpslhjcy.con|sourcetypes.conf,SourceCabKey=fil97B84F5B390C007A8F40384DE510112B,DestName=sourcetypes.conf,Attributes=512,FileSize=438138,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=-405573491,HashPart2=648277621,HashPart3=689351471,HashPart4=-1051996011,,)
MSI (s) (54:B4) [16:04:28:248]: File: C:\Program Files\SplunkUniversalForwarder\etc\system\default\sourcetypes.conf; To be installed; Won't patch; No existing file
MSI (s) (54:B4) [16:04:28:248]: Source for file 'fil97B84F5B390C007A8F40384DE510112B' is compressed
InstallFiles: File: sourcetypes.conf, Directory: C:\Program Files\SplunkUniversalForwarder\etc\system\default\, Size: 438138
MSI (s) (54:B4) [16:04:28:248]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\etc\system\metadata\)
MSI (s) (54:B4) [16:04:28:248]: Executing op: SetSourceFolder(Folder=1\w89duo8g\etc\system\metadata\|SplunkUniversalForwarder\etc\system\metadata\)
MSI (s) (54:B4) [16:04:28:248]: Executing op: FileCopy(SourceName=-0kiplrz.met|default.meta,SourceCabKey=fil982C245194D5F3BCA3F9760D8B29A6A7,DestName=default.meta,Attributes=512,FileSize=206,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=-1552205811,HashPart2=-1890186930,HashPart3=351946601,HashPart4=-1096482934,,)
MSI (s) (54:B4) [16:04:28:248]: File: C:\Program Files\SplunkUniversalForwarder\etc\system\metadata\default.meta; To be installed; Won't patch; No existing file
MSI (s) (54:B4) [16:04:28:248]: Source for file 'fil982C245194D5F3BCA3F9760D8B29A6A7' is compressed
InstallFiles: File: default.meta, Directory: C:\Program Files\SplunkUniversalForwarder\etc\system\metadata\, Size: 206
MSI (s) (54:B4) [16:04:28:248]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\bin\)
MSI (s) (54:B4) [16:04:28:248]: Executing op: SetSourceFolder(Folder=1\w89duo8g\bin\|SplunkUniversalForwarder\bin\)
MSI (s) (54:B4) [16:04:28:248]: Executing op: FileCopy(SourceName=03ondbvh.cat|splunkdrv-win6.cat,SourceCabKey=fil9BAF1375FF5935C40F21C6E1AA65905A,DestName=splunkdrv-win6.cat,Attributes=512,FileSize=6266,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=881541481,HashPart2=-1695503733,HashPart3=-2007878164,HashPart4=-1649996749,,)
MSI (s) (54:B4) [16:04:28:248]: File: C:\Program Files\SplunkUniversalForwarder\bin\splunkdrv-win6.cat; To be installed; Won't patch; No existing file
MSI (s) (54:B4) [16:04:28:248]: Source for file 'fil9BAF1375FF5935C40F21C6E1AA65905A' is compressed
InstallFiles: File: splunkdrv-win6.cat, Directory: C:\Program Files\SplunkUniversalForwarder\bin\, Size: 6266
MSI (s) (54:B4) [16:04:28:248]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\etc\deployment-apps\)
MSI (s) (54:B4) [16:04:28:248]: Executing op: SetSourceFolder(Folder=1\w89duo8g\etc\607fxfsu\|SplunkUniversalForwarder\etc\deployment-apps\)
MSI (s) (54:B4) [16:04:28:248]: Executing op: FileCopy(SourceName=README,SourceCabKey=fil9D059B7F77F7EBD964143307948104B0,DestName=README,Attributes=512,FileSize=313,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=1131588949,HashPart2=-1381517516,HashPart3=1324830974,HashPart4=1856969971,,)
MSI (s) (54:B4) [16:04:28:264]: File: C:\Program Files\SplunkUniversalForwarder\etc\deployment-apps\README; To be installed; Won't patch; No existing file
MSI (s) (54:B4) [16:04:28:264]: Source for file 'fil9D059B7F77F7EBD964143307948104B0' is compressed
InstallFiles: File: README, Directory: C:\Program Files\SplunkUniversalForwarder\etc\deployment-apps\, Size: 313
MSI (s) (54:B4) [16:04:28:264]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\etc\system\default\)
MSI (s) (54:B4) [16:04:28:264]: Executing op: SetSourceFolder(Folder=1\w89duo8g\etc\system\default\|SplunkUniversalForwarder\etc\system\default\)
MSI (s) (54:B4) [16:04:28:264]: Executing op: FileCopy(SourceName=i3ghmwnn.con|procmon-filters.conf,SourceCabKey=fil9E4E3CB2B4182EB1C198C9B01A536A0C,DestName=procmon-filters.conf,Attributes=512,FileSize=883,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=2006209194,HashPart2=-1582019338,HashPart3=632213538,HashPart4=1021040573,,)
MSI (s) (54:B4) [16:04:28:264]: File: C:\Program Files\SplunkUniversalForwarder\etc\system\default\procmon-filters.conf; To be installed; Won't patch; No existing file
MSI (s) (54:B4) [16:04:28:264]: Source for file 'fil9E4E3CB2B4182EB1C198C9B01A536A0C' is compressed
InstallFiles: File: procmon-filters.conf, Directory: C:\Program Files\SplunkUniversalForwarder\etc\system\default\, Size: 883
MSI (s) (54:B4) [16:04:28:264]: Executing op: FileCopy(SourceName=xulotk0s.con|authorize.conf,SourceCabKey=fil9ED4570C62823F66DA51B5B95F4AD2C5,DestName=authorize.conf,Attributes=512,FileSize=7486,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=-1351718953,HashPart2=3032591,HashPart3=1662145531,HashPart4=750922963,,)
MSI (s) (54:B4) [16:04:28:264]: File: C:\Program Files\SplunkUniversalForwarder\etc\system\default\authorize.conf; To be installed; Won't patch; No existing file
MSI (s) (54:B4) [16:04:28:264]: Source for file 'fil9ED4570C62823F66DA51B5B95F4AD2C5' is compressed
InstallFiles: File: authorize.conf, Directory: C:\Program Files\SplunkUniversalForwarder\etc\system\default\, Size: 7486
MSI (s) (54:B4) [16:04:28:264]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\etc\system\README\)
MSI (s) (54:B4) [16:04:28:264]: Executing op: SetSourceFolder(Folder=1\w89duo8g\etc\system\README\|SplunkUniversalForwarder\etc\system\README\)
MSI (s) (54:B4) [16:04:28:264]: Executing op: FileCopy(SourceName=8-ckg0mm.exa|restmap.conf.example,SourceCabKey=fil9F4F40308F0D9965AFECEC362E27B27D,DestName=restmap.conf.example,Attributes=512,FileSize=1522,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=-985447045,HashPart2=-1686734229,HashPart3=-238122601,HashPart4=124555749,,)
MSI (s) (54:B4) [16:04:28:264]: File: C:\Program Files\SplunkUniversalForwarder\etc\system\README\restmap.conf.example; To be installed; Won't patch; No existing file
MSI (s) (54:B4) [16:04:28:264]: Source for file 'fil9F4F40308F0D9965AFECEC362E27B27D' is compressed
InstallFiles: File: restmap.conf.example, Directory: C:\Program Files\SplunkUniversalForwarder\etc\system\README\, Size: 1522
MSI (s) (54:B4) [16:04:28:264]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\etc\system\default\)
MSI (s) (54:B4) [16:04:28:264]: Executing op: SetSourceFolder(Folder=1\w89duo8g\etc\system\default\|SplunkUniversalForwarder\etc\system\default\)
MSI (s) (54:B4) [16:04:28:264]: Executing op: FileCopy(SourceName=has489it.con|audit.conf,SourceCabKey=fil9F81DBF0F6DED77BF6E83CF8F6AC934D,DestName=audit.conf,Attributes=512,FileSize=564,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=-1647954080,HashPart2=-1301416075,HashPart3=654026066,HashPart4=1773046627,,)
MSI (s) (54:B4) [16:04:28:264]: File: C:\Program Files\SplunkUniversalForwarder\etc\system\default\audit.conf; To be installed; Won't patch; No existing file
MSI (s) (54:B4) [16:04:28:264]: Source for file 'fil9F81DBF0F6DED77BF6E83CF8F6AC934D' is compressed
InstallFiles: File: audit.conf, Directory: C:\Program Files\SplunkUniversalForwarder\etc\system\default\, Size: 564
MSI (s) (54:B4) [16:04:28:264]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\etc\system\README\)
MSI (s) (54:B4) [16:04:28:264]: Executing op: SetSourceFolder(Folder=1\w89duo8g\etc\system\README\|SplunkUniversalForwarder\etc\system\README\)
MSI (s) (54:B4) [16:04:28:264]: Executing op: FileCopy(SourceName=m5tj0iwq.exa|inputs.conf.example,SourceCabKey=filA4B49DD9ADB467348B04F931358829E8,DestName=inputs.conf.example,Attributes=512,FileSize=8488,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=-588369236,HashPart2=-131099544,HashPart3=-1303768787,HashPart4=-1942311360,,)
MSI (s) (54:B4) [16:04:28:264]: File: C:\Program Files\SplunkUniversalForwarder\etc\system\README\inputs.conf.example; To be installed; Won't patch; No existing file
MSI (s) (54:B4) [16:04:28:264]: Source for file 'filA4B49DD9ADB467348B04F931358829E8' is compressed
InstallFiles: File: inputs.conf.example, Directory: C:\Program Files\SplunkUniversalForwarder\etc\system\README\, Size: 8488
MSI (s) (54:B4) [16:04:28:264]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\bin\)
MSI (s) (54:B4) [16:04:28:264]: Executing op: SetSourceFolder(Folder=1\w89duo8g\bin\|SplunkUniversalForwarder\bin\)
MSI (s) (54:B4) [16:04:28:264]: Executing op: FileCopy(SourceName=tpoquum9.inf|SplunkMonitorNoHandledrv-vista.inf,SourceCabKey=filA58A592B836124C3D6FDF79E132A7692,DestName=SplunkMonitorNoHandledrv-vista.inf,Attributes=512,FileSize=3580,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=-1444047942,HashPart2=-1068676148,HashPart3=-994237673,HashPart4=328235876,,)
MSI (s) (54:B4) [16:04:28:264]: File: C:\Program Files\SplunkUniversalForwarder\bin\SplunkMonitorNoHandledrv-vista.inf; To be installed; Won't patch; No existing file
MSI (s) (54:B4) [16:04:28:264]: Source for file 'filA58A592B836124C3D6FDF79E132A7692' is compressed
InstallFiles: File: SplunkMonitorNoHandledrv-vista.inf, Directory: C:\Program Files\SplunkUniversalForwarder\bin\, Size: 3580
MSI (s) (54:B4) [16:04:28:264]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\etc\system\README\)
MSI (s) (54:B4) [16:04:28:264]: Executing op: SetSourceFolder(Folder=1\w89duo8g\etc\system\README\|SplunkUniversalForwarder\etc\system\README\)
MSI (s) (54:B4) [16:04:28:264]: Executing op: FileCopy(SourceName=x5kywhli.exa|source-classifier.conf.example,SourceCabKey=filA6F3274B8D862BA5BFF466C71A9B814A,DestName=source-classifier.conf.example,Attributes=512,FileSize=1308,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=-870270574,HashPart2=-311528719,HashPart3=-1448792891,HashPart4=-1956818796,,)
MSI (s) (54:B4) [16:04:28:264]: File: C:\Program Files\SplunkUniversalForwarder\etc\system\README\source-classifier.conf.example; To be installed; Won't patch; No existing file
MSI (s) (54:B4) [16:04:28:264]: Source for file 'filA6F3274B8D862BA5BFF466C71A9B814A' is compressed
InstallFiles: File: source-classifier.conf.example, Directory: C:\Program Files\SplunkUniversalForwarder\etc\system\README\, Size: 1308
MSI (s) (54:B4) [16:04:28:264]: Executing op: FileCopy(SourceName=sm4ofuiw.spe|props.conf.spec,SourceCabKey=filA7432AD6AF3DA2330B859C944DB5E198,DestName=props.conf.spec,Attributes=512,FileSize=59003,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=8634576,HashPart2=1456288792,HashPart3=1023203407,HashPart4=-169073113,,)
MSI (s) (54:B4) [16:04:28:264]: File: C:\Program Files\SplunkUniversalForwarder\etc\system\README\props.conf.spec; To be installed; Won't patch; No existing file
MSI (s) (54:B4) [16:04:28:264]: Source for file 'filA7432AD6AF3DA2330B859C944DB5E198' is compressed
InstallFiles: File: props.conf.spec, Directory: C:\Program Files\SplunkUniversalForwarder\etc\system\README\, Size: 59003
MSI (s) (54:B4) [16:04:28:280]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\etc\system\bin\)
MSI (s) (54:B4) [16:04:28:280]: Executing op: SetSourceFolder(Folder=1\w89duo8g\etc\system\bin\|SplunkUniversalForwarder\etc\system\bin\)
MSI (s) (54:B4) [16:04:28:280]: Executing op: FileCopy(SourceName=perfmon.cmd,SourceCabKey=filA74F8674601DAD081A4301855D119001,DestName=perfmon.cmd,Attributes=512,FileSize=3219,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=1233260020,HashPart2=59263538,HashPart3=-2031065856,HashPart4=385599971,,)
MSI (s) (54:B4) [16:04:28:280]: File: C:\Program Files\SplunkUniversalForwarder\etc\system\bin\perfmon.cmd; To be installed; Won't patch; No existing file
MSI (s) (54:B4) [16:04:28:280]: Source for file 'filA74F8674601DAD081A4301855D119001' is compressed
InstallFiles: File: perfmon.cmd, Directory: C:\Program Files\SplunkUniversalForwarder\etc\system\bin\, Size: 3219
MSI (s) (54:B4) [16:04:28:280]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\bin\)
MSI (s) (54:B4) [16:04:28:280]: Executing op: SetSourceFolder(Folder=1\w89duo8g\bin\|SplunkUniversalForwarder\bin\)
MSI (s) (54:B4) [16:04:28:280]: Executing op: FileCopy(SourceName=xprx-jvf.inf|splknetdrv-vista.inf,SourceCabKey=filA8AD42B727FB896197EE292797A1F463,DestName=splknetdrv-vista.inf,Attributes=512,FileSize=1850,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=-346361165,HashPart2=-1431820924,HashPart3=1186951188,HashPart4=-2046620318,,)
MSI (s) (54:B4) [16:04:28:280]: File: C:\Program Files\SplunkUniversalForwarder\bin\splknetdrv-vista.inf; To be installed; Won't patch; No existing file
MSI (s) (54:B4) [16:04:28:280]: Source for file 'filA8AD42B727FB896197EE292797A1F463' is compressed
InstallFiles: File: splknetdrv-vista.inf, Directory: C:\Program Files\SplunkUniversalForwarder\bin\, Size: 1850
MSI (s) (54:B4) [16:04:28:280]: Executing op: FileCopy(SourceName=vfjveawn.sys|SplunkMonitorNoHandledrv-win8.sys,SourceCabKey=filA9094CE4D7D5A857B7810D6C73C3FBFD,DestName=SplunkMonitorNoHandledrv-win8.sys,Attributes=512,FileSize=23520,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=6.2.9200.16384,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (54:B4) [16:04:28:280]: File: C:\Program Files\SplunkUniversalForwarder\bin\SplunkMonitorNoHandledrv-win8.sys; To be installed; Won't patch; No existing file
MSI (s) (54:B4) [16:04:28:280]: Source for file 'filA9094CE4D7D5A857B7810D6C73C3FBFD' is compressed
InstallFiles: File: SplunkMonitorNoHandledrv-win8.sys, Directory: C:\Program Files\SplunkUniversalForwarder\bin\, Size: 23520
MSI (s) (54:B4) [16:04:28:280]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\etc\apps\SplunkUniversalForwarder\default\)
MSI (s) (54:B4) [16:04:28:280]: Executing op: SetSourceFolder(Folder=1\w89duo8g\etc\apps\0k4ci1p3\default\|SplunkUniversalForwarder\etc\apps\SplunkUniversalForwarder\default\)
MSI (s) (54:B4) [16:04:28:280]: Executing op: FileCopy(SourceName=README,SourceCabKey=filA91ABA156411F6A5FE3AA0EE9124E7D5,DestName=README,Attributes=512,FileSize=757,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=-565450851,HashPart2=-1789153732,HashPart3=-613335296,HashPart4=-812605243,,)
MSI (s) (54:B4) [16:04:28:280]: File: C:\Program Files\SplunkUniversalForwarder\etc\apps\SplunkUniversalForwarder\default\README; To be installed; Won't patch; No existing file
MSI (s) (54:B4) [16:04:28:280]: Source for file 'filA91ABA156411F6A5FE3AA0EE9124E7D5' is compressed
InstallFiles: File: README, Directory: C:\Program Files\SplunkUniversalForwarder\etc\apps\SplunkUniversalForwarder\default\, Size: 757
MSI (s) (54:B4) [16:04:28:280]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\etc\shcluster\apps\)
MSI (s) (54:B4) [16:04:28:280]: Executing op: SetSourceFolder(Folder=1\w89duo8g\etc\2_slpnbx\apps\|SplunkUniversalForwarder\etc\shcluster\apps\)
MSI (s) (54:B4) [16:04:28:280]: Executing op: FileCopy(SourceName=README,SourceCabKey=filA9B15B4E60F8A498089FD81F1D3CA203,DestName=README,Attributes=512,FileSize=122,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=1580215305,HashPart2=-293333946,HashPart3=1004688504,HashPart4=-1088591715,,)
MSI (s) (54:B4) [16:04:28:280]: File: C:\Program Files\SplunkUniversalForwarder\etc\shcluster\apps\README; To be installed; Won't patch; No existing file
MSI (s) (54:B4) [16:04:28:280]: Source for file 'filA9B15B4E60F8A498089FD81F1D3CA203' is compressed
InstallFiles: File: README, Directory: C:\Program Files\SplunkUniversalForwarder\etc\shcluster\apps\, Size: 122
MSI (s) (54:B4) [16:04:28:280]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\bin\)
MSI (s) (54:B4) [16:04:28:280]: Executing op: SetSourceFolder(Folder=1\w89duo8g\bin\|SplunkUniversalForwarder\bin\)
MSI (s) (54:B4) [16:04:28:280]: Executing op: FileCopy(SourceName=6uigruya.cat|splknetdrv-win8.cat,SourceCabKey=filA9D13AFECAAA1A90C8E30D2ADCD5442D,DestName=splknetdrv-win8.cat,Attributes=512,FileSize=6241,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=-1402950108,HashPart2=532052071,HashPart3=508048604,HashPart4=1848819796,,)
MSI (s) (54:B4) [16:04:28:280]: File: C:\Program Files\SplunkUniversalForwarder\bin\splknetdrv-win8.cat; To be installed; Won't patch; No existing file
MSI (s) (54:B4) [16:04:28:280]: Source for file 'filA9D13AFECAAA1A90C8E30D2ADCD5442D' is compressed
InstallFiles: File: splknetdrv-win8.cat, Directory: C:\Program Files\SplunkUniversalForwarder\bin\, Size: 6241
MSI (s) (54:B4) [16:04:28:280]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\etc\system\static\)
MSI (s) (54:B4) [16:04:28:280]: Executing op: SetSourceFolder(Folder=1\w89duo8g\etc\system\static\|SplunkUniversalForwarder\etc\system\static\)
MSI (s) (54:B4) [16:04:28:280]: Executing op: FileCopy(SourceName=m6qjiikq.xml|splunkrc_cmds.xml,SourceCabKey=filA9E9D844A053B4EFC7C20895E040BED8,DestName=splunkrc_cmds.xml,Attributes=512,FileSize=180704,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=553455652,HashPart2=2009231401,HashPart3=1658021058,HashPart4=-1179705658,,)
MSI (s) (54:B4) [16:04:28:280]: File: C:\Program Files\SplunkUniversalForwarder\etc\system\static\splunkrc_cmds.xml; To be installed; Won't patch; No existing file
MSI (s) (54:B4) [16:04:28:280]: Source for file 'filA9E9D844A053B4EFC7C20895E040BED8' is compressed
InstallFiles: File: splunkrc_cmds.xml, Directory: C:\Program Files\SplunkUniversalForwarder\etc\system\static\, Size: 180704
MSI (s) (54:B4) [16:04:28:295]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\etc\shcluster\users\)
MSI (s) (54:B4) [16:04:28:295]: Executing op: SetSourceFolder(Folder=1\w89duo8g\etc\2_slpnbx\users\|SplunkUniversalForwarder\etc\shcluster\users\)
MSI (s) (54:B4) [16:04:28:295]: Executing op: FileCopy(SourceName=README,SourceCabKey=filAB0A37E7E5F933E4E43D8F7710A090D9,DestName=README,Attributes=512,FileSize=133,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=877252180,HashPart2=571092873,HashPart3=-813281497,HashPart4=-2095647073,,)
MSI (s) (54:B4) [16:04:28:295]: File: C:\Program Files\SplunkUniversalForwarder\etc\shcluster\users\README; To be installed; Won't patch; No existing file
MSI (s) (54:B4) [16:04:28:295]: Source for file 'filAB0A37E7E5F933E4E43D8F7710A090D9' is compressed
InstallFiles: File: README, Directory: C:\Program Files\SplunkUniversalForwarder\etc\shcluster\users\, Size: 133
MSI (s) (54:B4) [16:04:28:295]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\etc\apps\search\lookups\)
MSI (s) (54:B4) [16:04:28:295]: Executing op: SetSourceFolder(Folder=1\w89duo8g\etc\apps\search\lookups\|SplunkUniversalForwarder\etc\apps\search\lookups\)
MSI (s) (54:B4) [16:04:28:295]: Executing op: FileCopy(SourceName=README,SourceCabKey=filAE310E89DBD11CEE52933BAEE2504714,DestName=README,Attributes=512,FileSize=45,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=-1627833121,HashPart2=-1304550302,HashPart3=818830635,HashPart4=653943387,,)
MSI (s) (54:B4) [16:04:28:295]: File: C:\Program Files\SplunkUniversalForwarder\etc\apps\search\lookups\README; To be installed; Won't patch; No existing file
MSI (s) (54:B4) [16:04:28:295]: Source for file 'filAE310E89DBD11CEE52933BAEE2504714' is compressed
InstallFiles: File: README, Directory: C:\Program Files\SplunkUniversalForwarder\etc\apps\search\lookups\, Size: 45
MSI (s) (54:B4) [16:04:28:295]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\bin\)
MSI (s) (54:B4) [16:04:28:295]: Executing op: SetSourceFolder(Folder=1\w89duo8g\bin\|SplunkUniversalForwarder\bin\)
MSI (s) (54:B4) [16:04:28:295]: Executing op: FileCopy(SourceName=msvcr110.dll,SourceCabKey=filAEBDF98396B5B028F09A0BA7F067791B,DestName=msvcr110.dll,Attributes=512,FileSize=849360,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=11.0.51106.1,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (54:B4) [16:04:28:295]: File: C:\Program Files\SplunkUniversalForwarder\bin\msvcr110.dll; To be installed; Won't patch; No existing file
MSI (s) (54:B4) [16:04:28:295]: Source for file 'filAEBDF98396B5B028F09A0BA7F067791B' is compressed
InstallFiles: File: msvcr110.dll, Directory: C:\Program Files\SplunkUniversalForwarder\bin\, Size: 849360
MSI (s) (54:B4) [16:04:28:295]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\etc\system\local\)
MSI (s) (54:B4) [16:04:28:295]: Executing op: SetSourceFolder(Folder=1\w89duo8g\etc\system\local\|SplunkUniversalForwarder\etc\system\local\)
MSI (s) (54:B4) [16:04:28:295]: Executing op: FileCopy(SourceName=README,SourceCabKey=filAF59BDCE776E3B789E61BCF2F68FEBBD,DestName=README,Attributes=512,FileSize=273,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=-346166330,HashPart2=450041776,HashPart3=-1546113868,HashPart4=336864893,,)
MSI (s) (54:B4) [16:04:28:295]: File: C:\Program Files\SplunkUniversalForwarder\etc\system\local\README; To be installed; Won't patch; No existing file
MSI (s) (54:B4) [16:04:28:295]: Source for file 'filAF59BDCE776E3B789E61BCF2F68FEBBD' is compressed
InstallFiles: File: README, Directory: C:\Program Files\SplunkUniversalForwarder\etc\system\local\, Size: 273
MSI (s) (54:B4) [16:04:28:311]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\etc\system\README\)
MSI (s) (54:B4) [16:04:28:311]: Executing op: SetSourceFolder(Folder=1\w89duo8g\etc\system\README\|SplunkUniversalForwarder\etc\system\README\)
MSI (s) (54:B4) [16:04:28:311]: Executing op: FileCopy(SourceName=zrt-13u_.exa|collections.conf.example,SourceCabKey=filB33E8D029CF561838D33E1A55B0133E0,DestName=collections.conf.example,Attributes=512,FileSize=588,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=-401861177,HashPart2=1892948881,HashPart3=710281487,HashPart4=-543229852,,)
MSI (s) (54:B4) [16:04:28:311]: File: C:\Program Files\SplunkUniversalForwarder\etc\system\README\collections.conf.example; To be installed; Won't patch; No existing file
MSI (s) (54:B4) [16:04:28:311]: Source for file 'filB33E8D029CF561838D33E1A55B0133E0' is compressed
InstallFiles: File: collections.conf.example, Directory: C:\Program Files\SplunkUniversalForwarder\etc\system\README\, Size: 588
MSI (s) (54:B4) [16:04:28:311]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\etc\apps\SplunkUniversalForwarder\default\)
MSI (s) (54:B4) [16:04:28:311]: Executing op: SetSourceFolder(Folder=1\w89duo8g\etc\apps\0k4ci1p3\default\|SplunkUniversalForwarder\etc\apps\SplunkUniversalForwarder\default\)
MSI (s) (54:B4) [16:04:28:311]: Executing op: FileCopy(SourceName=ojgomakm.con|default-mode.conf,SourceCabKey=filB3E1F7A649ECA6B931CB58734FAABEFF,DestName=default-mode.conf,Attributes=512,FileSize=878,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=-548704356,HashPart2=-588356433,HashPart3=-1051267194,HashPart4=2050167709,,)
MSI (s) (54:B4) [16:04:28:311]: File: C:\Program Files\SplunkUniversalForwarder\etc\apps\SplunkUniversalForwarder\default\default-mode.conf; To be installed; Won't patch; No existing file
MSI (s) (54:B4) [16:04:28:311]: Source for file 'filB3E1F7A649ECA6B931CB58734FAABEFF' is compressed
InstallFiles: File: default-mode.conf, Directory: C:\Program Files\SplunkUniversalForwarder\etc\apps\SplunkUniversalForwarder\default\, Size: 878
MSI (s) (54:B4) [16:04:28:311]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\etc\system\README\)
MSI (s) (54:B4) [16:04:28:311]: Executing op: SetSourceFolder(Folder=1\w89duo8g\etc\system\README\|SplunkUniversalForwarder\etc\system\README\)
MSI (s) (54:B4) [16:04:28:311]: Executing op: FileCopy(SourceName=kywedgyd.spe|user-prefs.conf.spec,SourceCabKey=filB55EBC7AEC708A82CAC1FC01EB3CA008,DestName=user-prefs.conf.spec,Attributes=512,FileSize=1697,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=-741869682,HashPart2=259438703,HashPart3=-1944980783,HashPart4=-361926259,,)
MSI (s) (54:B4) [16:04:28:311]: File: C:\Program Files\SplunkUniversalForwarder\etc\system\README\user-prefs.conf.spec; To be installed; Won't patch; No existing file
MSI (s) (54:B4) [16:04:28:311]: Source for file 'filB55EBC7AEC708A82CAC1FC01EB3CA008' is compressed
InstallFiles: File: user-prefs.conf.spec, Directory: C:\Program Files\SplunkUniversalForwarder\etc\system\README\, Size: 1697
MSI (s) (54:B4) [16:04:28:311]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\share\splunk\3rdparty\)
MSI (s) (54:B4) [16:04:28:311]: Executing op: SetSourceFolder(Folder=1\w89duo8g\share\splunk\3rdparty\|SplunkUniversalForwarder\share\splunk\3rdparty\)
MSI (s) (54:B4) [16:04:28:311]: Executing op: FileCopy(SourceName=d9braios.txt|Copyright-for-pcre-8.33.txt,SourceCabKey=filB6B8DE3EDD58E95F1AEAE01976FB54E4,DestName=Copyright-for-pcre-8.33.txt,Attributes=512,FileSize=3099,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=449585161,HashPart2=1420393375,HashPart3=-1474344604,HashPart4=-659585476,,)
MSI (s) (54:B4) [16:04:28:311]: File: C:\Program Files\SplunkUniversalForwarder\share\splunk\3rdparty\Copyright-for-pcre-8.33.txt; To be installed; Won't patch; No existing file
MSI (s) (54:B4) [16:04:28:311]: Source for file 'filB6B8DE3EDD58E95F1AEAE01976FB54E4' is compressed
InstallFiles: File: Copyright-for-pcre-8.33.txt, Directory: C:\Program Files\SplunkUniversalForwarder\share\splunk\3rdparty\, Size: 3099
MSI (s) (54:B4) [16:04:28:311]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\etc\disabled-apps\)
MSI (s) (54:B4) [16:04:28:311]: Executing op: SetSourceFolder(Folder=1\w89duo8g\etc\d7abrfwm\|SplunkUniversalForwarder\etc\disabled-apps\)
MSI (s) (54:B4) [16:04:28:311]: Executing op: FileCopy(SourceName=README,SourceCabKey=filB87AB719CCB4170C4487DE3DE32D8A2B,DestName=README,Attributes=512,FileSize=241,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=1167675495,HashPart2=-810028514,HashPart3=-141643766,HashPart4=409646918,,)
MSI (s) (54:B4) [16:04:28:311]: File: C:\Program Files\SplunkUniversalForwarder\etc\disabled-apps\README; To be installed; Won't patch; No existing file
MSI (s) (54:B4) [16:04:28:311]: Source for file 'filB87AB719CCB4170C4487DE3DE32D8A2B' is compressed
InstallFiles: File: README, Directory: C:\Program Files\SplunkUniversalForwarder\etc\disabled-apps\, Size: 241
MSI (s) (54:B4) [16:04:28:311]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\etc\apps\SplunkUniversalForwarder\default\)
MSI (s) (54:B4) [16:04:28:311]: Executing op: SetSourceFolder(Folder=1\w89duo8g\etc\apps\0k4ci1p3\default\|SplunkUniversalForwarder\etc\apps\SplunkUniversalForwarder\default\)
MSI (s) (54:B4) [16:04:28:311]: Executing op: FileCopy(SourceName=6r31fgrx.con|server.conf,SourceCabKey=filB9173BDA84EF0A89331114F43A79BE99,DestName=server.conf,Attributes=512,FileSize=135,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=333417583,HashPart2=-152769966,HashPart3=899936943,HashPart4=715079991,,)
MSI (s) (54:B4) [16:04:28:311]: File: C:\Program Files\SplunkUniversalForwarder\etc\apps\SplunkUniversalForwarder\default\server.conf; To be installed; Won't patch; No existing file
MSI (s) (54:B4) [16:04:28:311]: Source for file 'filB9173BDA84EF0A89331114F43A79BE99' is compressed
InstallFiles: File: server.conf, Directory: C:\Program Files\SplunkUniversalForwarder\etc\apps\SplunkUniversalForwarder\default\, Size: 135
MSI (s) (54:B4) [16:04:28:311]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\bin\)
MSI (s) (54:B4) [16:04:28:311]: Executing op: SetSourceFolder(Folder=1\w89duo8g\bin\|SplunkUniversalForwarder\bin\)
MSI (s) (54:B4) [16:04:28:311]: Executing op: FileCopy(SourceName=btool.exe,SourceCabKey=filB997555BD2F107D5D32274D97396A1CB,DestName=btool.exe,Attributes=512,FileSize=67816,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=1538.512.0.58998,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (54:B4) [16:04:28:311]: File: C:\Program Files\SplunkUniversalForwarder\bin\btool.exe; To be installed; Won't patch; No existing file
MSI (s) (54:B4) [16:04:28:311]: Source for file 'filB997555BD2F107D5D32274D97396A1CB' is compressed
InstallFiles: File: btool.exe, Directory: C:\Program Files\SplunkUniversalForwarder\bin\, Size: 67816
MSI (s) (54:B4) [16:04:28:327]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\etc\system\README\)
MSI (s) (54:B4) [16:04:28:327]: Executing op: SetSourceFolder(Folder=1\w89duo8g\etc\system\README\|SplunkUniversalForwarder\etc\system\README\)
MSI (s) (54:B4) [16:04:28:327]: Executing op: FileCopy(SourceName=gz7xj4ch.exa|props.conf.example,SourceCabKey=filBC2816778BEE9861CAD8F3E539E72290,DestName=props.conf.example,Attributes=512,FileSize=4348,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=-1802242131,HashPart2=1892457862,HashPart3=1510071212,HashPart4=774023885,,)
MSI (s) (54:B4) [16:04:28:327]: File: C:\Program Files\SplunkUniversalForwarder\etc\system\README\props.conf.example; To be installed; Won't patch; No existing file
MSI (s) (54:B4) [16:04:28:327]: Source for file 'filBC2816778BEE9861CAD8F3E539E72290' is compressed
InstallFiles: File: props.conf.example, Directory: C:\Program Files\SplunkUniversalForwarder\etc\system\README\, Size: 4348
MSI (s) (54:B4) [16:04:28:327]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\bin\)
MSI (s) (54:B4) [16:04:28:327]: Executing op: SetSourceFolder(Folder=1\w89duo8g\bin\|SplunkUniversalForwarder\bin\)
MSI (s) (54:B4) [16:04:28:327]: Executing op: FileCopy(SourceName=lt6ta99u.txt|copyright.txt,SourceCabKey=filBC889E22EB8FFDE5558F3423C01D7EDC,DestName=copyright.txt,Attributes=512,FileSize=58,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=-869762882,HashPart2=1582527905,HashPart3=1827730478,HashPart4=-420082666,,)
MSI (s) (54:B4) [16:04:28:327]: File: C:\Program Files\SplunkUniversalForwarder\bin\copyright.txt; To be installed; Won't patch; No existing file
MSI (s) (54:B4) [16:04:28:327]: Source for file 'filBC889E22EB8FFDE5558F3423C01D7EDC' is compressed
InstallFiles: File: copyright.txt, Directory: C:\Program Files\SplunkUniversalForwarder\bin\, Size: 58
MSI (s) (54:B4) [16:04:28:327]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\etc\apps\search\default\)
MSI (s) (54:B4) [16:04:28:327]: Executing op: SetSourceFolder(Folder=1\w89duo8g\etc\apps\search\default\|SplunkUniversalForwarder\etc\apps\search\default\)
MSI (s) (54:B4) [16:04:28:327]: Executing op: FileCopy(SourceName=nkdqtiqr.con|inputs.conf,SourceCabKey=filBC97CBFC347E358F3BEB72D9CB1474C2,DestName=inputs.conf,Attributes=512,FileSize=22,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=1072747005,HashPart2=235734028,HashPart3=1749153208,HashPart4=-130960510,,)
MSI (s) (54:B4) [16:04:28:327]: File: C:\Program Files\SplunkUniversalForwarder\etc\apps\search\default\inputs.conf; To be installed; Won't patch; No existing file
MSI (s) (54:B4) [16:04:28:327]: Source for file 'filBC97CBFC347E358F3BEB72D9CB1474C2' is compressed
InstallFiles: File: inputs.conf, Directory: C:\Program Files\SplunkUniversalForwarder\etc\apps\search\default\, Size: 22
MSI (s) (54:B4) [16:04:28:327]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\)
MSI (s) (54:B4) [16:04:28:327]: Executing op: SetSourceFolder(Folder=1\w89duo8g\|SplunkUniversalForwarder\)
MSI (s) (54:B4) [16:04:28:327]: Executing op: FileCopy(SourceName=oliq14fj.txt|README-splunk.txt,SourceCabKey=filBDECFE9DFE404122482E9D611B013E86,DestName=README-splunk.txt,Attributes=512,FileSize=863,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=-70741579,HashPart2=865303329,HashPart3=-78748664,HashPart4=-957938612,,)
MSI (s) (54:B4) [16:04:28:327]: File: C:\Program Files\SplunkUniversalForwarder\README-splunk.txt; To be installed; Won't patch; No existing file
MSI (s) (54:B4) [16:04:28:327]: Source for file 'filBDECFE9DFE404122482E9D611B013E86' is compressed
InstallFiles: File: README-splunk.txt, Directory: C:\Program Files\SplunkUniversalForwarder\, Size: 863
MSI (s) (54:B4) [16:04:28:327]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\share\splunk\3rdparty\)
MSI (s) (54:B4) [16:04:28:327]: Executing op: SetSourceFolder(Folder=1\w89duo8g\share\splunk\3rdparty\|SplunkUniversalForwarder\share\splunk\3rdparty\)
MSI (s) (54:B4) [16:04:28:327]: Executing op: FileCopy(SourceName=ctjgyemi.txt|Copyright-for-libxslt-1.1.28.txt,SourceCabKey=filBEE3F1B1E3E5EE1074ED8DFEE5235E4C,DestName=Copyright-for-libxslt-1.1.28.txt,Attributes=512,FileSize=2968,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=2057361676,HashPart2=35974139,HashPart3=-1375495316,HashPart4=1487203279,,)
MSI (s) (54:B4) [16:04:28:327]: File: C:\Program Files\SplunkUniversalForwarder\share\splunk\3rdparty\Copyright-for-libxslt-1.1.28.txt; To be installed; Won't patch; No existing file
MSI (s) (54:B4) [16:04:28:327]: Source for file 'filBEE3F1B1E3E5EE1074ED8DFEE5235E4C' is compressed
InstallFiles: File: Copyright-for-libxslt-1.1.28.txt, Directory: C:\Program Files\SplunkUniversalForwarder\share\splunk\3rdparty\, Size: 2968
MSI (s) (54:B4) [16:04:28:327]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\etc\system\default\)
MSI (s) (54:B4) [16:04:28:327]: Executing op: SetSourceFolder(Folder=1\w89duo8g\etc\system\default\|SplunkUniversalForwarder\etc\system\default\)
MSI (s) (54:B4) [16:04:28:327]: Executing op: FileCopy(SourceName=pg_ooqy1.con|alert_actions.conf,SourceCabKey=filC083D8F7F7648D124EDB1EBCA3041E46,DestName=alert_actions.conf,Attributes=512,FileSize=5156,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=-1184265874,HashPart2=1169418678,HashPart3=-71733177,HashPart4=-2005232173,,)
MSI (s) (54:B4) [16:04:28:327]: File: C:\Program Files\SplunkUniversalForwarder\etc\system\default\alert_actions.conf; To be installed; Won't patch; No existing file
MSI (s) (54:B4) [16:04:28:327]: Source for file 'filC083D8F7F7648D124EDB1EBCA3041E46' is compressed
InstallFiles: File: alert_actions.conf, Directory: C:\Program Files\SplunkUniversalForwarder\etc\system\default\, Size: 5156
MSI (s) (54:B4) [16:04:28:327]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\etc\modules\input\winparsing\)
MSI (s) (54:B4) [16:04:28:327]: Executing op: SetSourceFolder(Folder=1\w89duo8g\etc\modules\input\a0v-kg5d\|SplunkUniversalForwarder\etc\modules\input\winparsing\)
MSI (s) (54:B4) [16:04:28:327]: Executing op: FileCopy(SourceName=config.xml,SourceCabKey=filC269D1D5A7130302DFBD3ED9375FDE87,DestName=config.xml,Attributes=512,FileSize=1028,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=861036528,HashPart2=-1096279512,HashPart3=-1092788611,HashPart4=2059123823,,)
MSI (s) (54:B4) [16:04:28:327]: File: C:\Program Files\SplunkUniversalForwarder\etc\modules\input\winparsing\config.xml; To be installed; Won't patch; No existing file
MSI (s) (54:B4) [16:04:28:327]: Source for file 'filC269D1D5A7130302DFBD3ED9375FDE87' is compressed
InstallFiles: File: config.xml, Directory: C:\Program Files\SplunkUniversalForwarder\etc\modules\input\winparsing\, Size: 1028
MSI (s) (54:B4) [16:04:28:342]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\etc\apps\SplunkUniversalForwarder\default\)
MSI (s) (54:B4) [16:04:28:342]: Executing op: SetSourceFolder(Folder=1\w89duo8g\etc\apps\0k4ci1p3\default\|SplunkUniversalForwarder\etc\apps\SplunkUniversalForwarder\default\)
MSI (s) (54:B4) [16:04:28:342]: Executing op: FileCopy(SourceName=ypundwwy.con|props.conf,SourceCabKey=filC80F9C9DD39359DEDBBE805DD7A362E4,DestName=props.conf,Attributes=512,FileSize=255,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=-1482627212,HashPart2=-70256590,HashPart3=480163395,HashPart4=-289370373,,)
MSI (s) (54:B4) [16:04:28:342]: File: C:\Program Files\SplunkUniversalForwarder\etc\apps\SplunkUniversalForwarder\default\props.conf; To be installed; Won't patch; No existing file
MSI (s) (54:B4) [16:04:28:342]: Source for file 'filC80F9C9DD39359DEDBBE805DD7A362E4' is compressed
InstallFiles: File: props.conf, Directory: C:\Program Files\SplunkUniversalForwarder\etc\apps\SplunkUniversalForwarder\default\, Size: 255
MSI (s) (54:B4) [16:04:28:342]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\share\splunk\3rdparty\)
MSI (s) (54:B4) [16:04:28:342]: Executing op: SetSourceFolder(Folder=1\w89duo8g\share\splunk\3rdparty\|SplunkUniversalForwarder\share\splunk\3rdparty\)
MSI (s) (54:B4) [16:04:28:342]: Executing op: FileCopy(SourceName=htskkvoe.txt|Copyright-for-libxml2-2.9.1.txt,SourceCabKey=filC941038698BE2074748AB3CCF4FD99CA,DestName=Copyright-for-libxml2-2.9.1.txt,Attributes=512,FileSize=1289,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=2118206496,HashPart2=-1241100242,HashPart3=1737526106,HashPart4=-235109450,,)
MSI (s) (54:B4) [16:04:28:342]: File: C:\Program Files\SplunkUniversalForwarder\share\splunk\3rdparty\Copyright-for-libxml2-2.9.1.txt; To be installed; Won't patch; No existing file
MSI (s) (54:B4) [16:04:28:342]: Source for file 'filC941038698BE2074748AB3CCF4FD99CA' is compressed
InstallFiles: File: Copyright-for-libxml2-2.9.1.txt, Directory: C:\Program Files\SplunkUniversalForwarder\share\splunk\3rdparty\, Size: 1289
MSI (s) (54:B4) [16:04:28:342]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\etc\apps\search\default\)
MSI (s) (54:B4) [16:04:28:342]: Executing op: SetSourceFolder(Folder=1\w89duo8g\etc\apps\search\default\|SplunkUniversalForwarder\etc\apps\search\default\)
MSI (s) (54:B4) [16:04:28:342]: Executing op: FileCopy(SourceName=6aq9gcte.con|restmap.conf,SourceCabKey=filCA5F5D41767432CBBA8F56E32345A42F,DestName=restmap.conf,Attributes=512,FileSize=140,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=261264156,HashPart2=-1880248635,HashPart3=1753524648,HashPart4=1110792710,,)
MSI (s) (54:B4) [16:04:28:342]: File: C:\Program Files\SplunkUniversalForwarder\etc\apps\search\default\restmap.conf; To be installed; Won't patch; No existing file
MSI (s) (54:B4) [16:04:28:342]: Source for file 'filCA5F5D41767432CBBA8F56E32345A42F' is compressed
InstallFiles: File: restmap.conf, Directory: C:\Program Files\SplunkUniversalForwarder\etc\apps\search\default\, Size: 140
MSI (s) (54:B4) [16:04:28:342]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\etc\system\README\)
MSI (s) (54:B4) [16:04:28:342]: Executing op: SetSourceFolder(Folder=1\w89duo8g\etc\system\README\|SplunkUniversalForwarder\etc\system\README\)
MSI (s) (54:B4) [16:04:28:342]: Executing op: FileCopy(SourceName=ywr6c_6c.spe|server.conf.spec,SourceCabKey=filCAD53445CD026138ABA137073C5BFA5A,DestName=server.conf.spec,Attributes=512,FileSize=105856,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=1013500390,HashPart2=315884855,HashPart3=-465013572,HashPart4=48304875,,)
MSI (s) (54:B4) [16:04:28:342]: File: C:\Program Files\SplunkUniversalForwarder\etc\system\README\server.conf.spec; To be installed; Won't patch; No existing file
MSI (s) (54:B4) [16:04:28:342]: Source for file 'filCAD53445CD026138ABA137073C5BFA5A' is compressed
InstallFiles: File: server.conf.spec, Directory: C:\Program Files\SplunkUniversalForwarder\etc\system\README\, Size: 105856
MSI (s) (54:B4) [16:04:28:342]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\etc\apps\introspection_generator_addon\default\)
MSI (s) (54:B4) [16:04:28:342]: Executing op: SetSourceFolder(Folder=1\w89duo8g\etc\apps\5ei81amz\default\|SplunkUniversalForwarder\etc\apps\introspection_generator_addon\default\)
MSI (s) (54:B4) [16:04:28:342]: Executing op: FileCopy(SourceName=whgvtlyr.con|app.conf,SourceCabKey=filCBA61C20CE05C5DC8EF0ED83C43254DF,DestName=app.conf,Attributes=512,FileSize=219,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=2045404397,HashPart2=1845971913,HashPart3=-150014935,HashPart4=825316590,,)
MSI (s) (54:B4) [16:04:28:342]: File: C:\Program Files\SplunkUniversalForwarder\etc\apps\introspection_generator_addon\default\app.conf; To be installed; Won't patch; No existing file
MSI (s) (54:B4) [16:04:28:342]: Source for file 'filCBA61C20CE05C5DC8EF0ED83C43254DF' is compressed
InstallFiles: File: app.conf, Directory: C:\Program Files\SplunkUniversalForwarder\etc\apps\introspection_generator_addon\default\, Size: 219
MSI (s) (54:B4) [16:04:28:342]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\etc\system\default\)
MSI (s) (54:B4) [16:04:28:342]: Executing op: SetSourceFolder(Folder=1\w89duo8g\etc\system\default\|SplunkUniversalForwarder\etc\system\default\)
MSI (s) (54:B4) [16:04:28:342]: Executing op: FileCopy(SourceName=gmyo3okn.con|server.conf,SourceCabKey=filCC1F36045B42424D7641303C5B06642D,DestName=server.conf,Attributes=512,FileSize=13507,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=1789368795,HashPart2=-1787367723,HashPart3=774139001,HashPart4=-1885021402,,)
MSI (s) (54:B4) [16:04:28:342]: File: C:\Program Files\SplunkUniversalForwarder\etc\system\default\server.conf; To be installed; Won't patch; No existing file
MSI (s) (54:B4) [16:04:28:342]: Source for file 'filCC1F36045B42424D7641303C5B06642D' is compressed
InstallFiles: File: server.conf, Directory: C:\Program Files\SplunkUniversalForwarder\etc\system\default\, Size: 13507
MSI (s) (54:B4) [16:04:28:342]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\etc\modules\input\TCP\)
MSI (s) (54:B4) [16:04:28:342]: Executing op: SetSourceFolder(Folder=1\w89duo8g\etc\modules\input\TCP\|SplunkUniversalForwarder\etc\modules\input\TCP\)
MSI (s) (54:B4) [16:04:28:342]: Executing op: FileCopy(SourceName=config.xml,SourceCabKey=filCC65024C5DC80DE24FD65F438D1FED93,DestName=config.xml,Attributes=512,FileSize=752,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=-596301086,HashPart2=167901141,HashPart3=-1153791322,HashPart4=-277942694,,)
MSI (s) (54:B4) [16:04:28:342]: File: C:\Program Files\SplunkUniversalForwarder\etc\modules\input\TCP\config.xml; To be installed; Won't patch; No existing file
MSI (s) (54:B4) [16:04:28:342]: Source for file 'filCC65024C5DC80DE24FD65F438D1FED93' is compressed
InstallFiles: File: config.xml, Directory: C:\Program Files\SplunkUniversalForwarder\etc\modules\input\TCP\, Size: 752
MSI (s) (54:B4) [16:04:28:358]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\etc\system\README\)
MSI (s) (54:B4) [16:04:28:358]: Executing op: SetSourceFolder(Folder=1\w89duo8g\etc\system\README\|SplunkUniversalForwarder\etc\system\README\)
MSI (s) (54:B4) [16:04:28:358]: Executing op: FileCopy(SourceName=9qfiiicj.spe|literals.conf.spec,SourceCabKey=filCCAEAA94E758EEA0A20BBC166F5B250B,DestName=literals.conf.spec,Attributes=512,FileSize=1368,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=-568084061,HashPart2=909531942,HashPart3=-1090373956,HashPart4=514219624,,)
MSI (s) (54:B4) [16:04:28:358]: File: C:\Program Files\SplunkUniversalForwarder\etc\system\README\literals.conf.spec; To be installed; Won't patch; No existing file
MSI (s) (54:B4) [16:04:28:358]: Source for file 'filCCAEAA94E758EEA0A20BBC166F5B250B' is compressed
InstallFiles: File: literals.conf.spec, Directory: C:\Program Files\SplunkUniversalForwarder\etc\system\README\, Size: 1368
MSI (s) (54:B4) [16:04:28:358]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\etc\apps\SplunkUniversalForwarder\default\)
MSI (s) (54:B4) [16:04:28:358]: Executing op: SetSourceFolder(Folder=1\w89duo8g\etc\apps\0k4ci1p3\default\|SplunkUniversalForwarder\etc\apps\SplunkUniversalForwarder\default\)
MSI (s) (54:B4) [16:04:28:358]: Executing op: FileCopy(SourceName=lf-8raoo.con|app.conf,SourceCabKey=filCCD7563F13FD21F3E76E689C311B523D,DestName=app.conf,Attributes=512,FileSize=73,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=934285236,HashPart2=1206516311,HashPart3=-1285315278,HashPart4=790376297,,)
MSI (s) (54:B4) [16:04:28:358]: File: C:\Program Files\SplunkUniversalForwarder\etc\apps\SplunkUniversalForwarder\default\app.conf; To be installed; Won't patch; No existing file
MSI (s) (54:B4) [16:04:28:358]: Source for file 'filCCD7563F13FD21F3E76E689C311B523D' is compressed
InstallFiles: File: app.conf, Directory: C:\Program Files\SplunkUniversalForwarder\etc\apps\SplunkUniversalForwarder\default\, Size: 73
MSI (s) (54:B4) [16:04:28:358]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\etc\system\default\)
MSI (s) (54:B4) [16:04:28:358]: Executing op: SetSourceFolder(Folder=1\w89duo8g\etc\system\default\|SplunkUniversalForwarder\etc\system\default\)
MSI (s) (54:B4) [16:04:28:358]: Executing op: FileCopy(SourceName=vd3y-3lw.con|inputs.conf,SourceCabKey=filD043569E0625C8D8D00839775A0DC4BA,DestName=inputs.conf,Attributes=512,FileSize=2705,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=-1927027447,HashPart2=-1922667897,HashPart3=-1567514014,HashPart4=-755395618,,)
MSI (s) (54:B4) [16:04:28:358]: File: C:\Program Files\SplunkUniversalForwarder\etc\system\default\inputs.conf; To be installed; Won't patch; No existing file
MSI (s) (54:B4) [16:04:28:358]: Source for file 'filD043569E0625C8D8D00839775A0DC4BA' is compressed
InstallFiles: File: inputs.conf, Directory: C:\Program Files\SplunkUniversalForwarder\etc\system\default\, Size: 2705
MSI (s) (54:B4) [16:04:28:358]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\etc\)
MSI (s) (54:B4) [16:04:28:358]: Executing op: SetSourceFolder(Folder=1\w89duo8g\etc\|SplunkUniversalForwarder\etc\)
MSI (s) (54:B4) [16:04:28:358]: Executing op: FileCopy(SourceName=hd6ij7-n.cfg|log-btool-debug.cfg,SourceCabKey=filD14D3D477DF0E3D49F21A3A4E18F410B,DestName=log-btool-debug.cfg,Attributes=512,FileSize=511,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=-2105267088,HashPart2=-1985623974,HashPart3=813629788,HashPart4=-1407267851,,)
MSI (s) (54:B4) [16:04:28:358]: File: C:\Program Files\SplunkUniversalForwarder\etc\log-btool-debug.cfg; To be installed; Won't patch; No existing file
MSI (s) (54:B4) [16:04:28:358]: Source for file 'filD14D3D477DF0E3D49F21A3A4E18F410B' is compressed
InstallFiles: File: log-btool-debug.cfg, Directory: C:\Program Files\SplunkUniversalForwarder\etc\, Size: 511
MSI (s) (54:B4) [16:04:28:358]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\bin\)
MSI (s) (54:B4) [16:04:28:358]: Executing op: SetSourceFolder(Folder=1\w89duo8g\bin\|SplunkUniversalForwarder\bin\)
MSI (s) (54:B4) [16:04:28:358]: Executing op: FileCopy(SourceName=btprobe.exe,SourceCabKey=filD3D45CBE21546CB089F1F87079CC1B64,DestName=btprobe.exe,Attributes=512,FileSize=67816,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=1538.512.0.58998,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (54:B4) [16:04:28:358]: File: C:\Program Files\SplunkUniversalForwarder\bin\btprobe.exe; To be installed; Won't patch; No existing file
MSI (s) (54:B4) [16:04:28:358]: Source for file 'filD3D45CBE21546CB089F1F87079CC1B64' is compressed
InstallFiles: File: btprobe.exe, Directory: C:\Program Files\SplunkUniversalForwarder\bin\, Size: 67816
MSI (s) (54:B4) [16:04:28:358]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\etc\apps\SplunkUniversalForwarder\metadata\)
MSI (s) (54:B4) [16:04:28:358]: Executing op: SetSourceFolder(Folder=1\w89duo8g\etc\apps\0k4ci1p3\metadata\|SplunkUniversalForwarder\etc\apps\SplunkUniversalForwarder\metadata\)
MSI (s) (54:B4) [16:04:28:358]: Executing op: FileCopy(SourceName=rb6peyia.met|default.meta,SourceCabKey=filD489E311E028C203064AB15DF965E738,DestName=default.meta,Attributes=512,FileSize=81,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=1204565045,HashPart2=-1705561563,HashPart3=1372131501,HashPart4=542278582,,)
MSI (s) (54:B4) [16:04:28:358]: File: C:\Program Files\SplunkUniversalForwarder\etc\apps\SplunkUniversalForwarder\metadata\default.meta; To be installed; Won't patch; No existing file
MSI (s) (54:B4) [16:04:28:358]: Source for file 'filD489E311E028C203064AB15DF965E738' is compressed
InstallFiles: File: default.meta, Directory: C:\Program Files\SplunkUniversalForwarder\etc\apps\SplunkUniversalForwarder\metadata\, Size: 81
MSI (s) (54:B4) [16:04:28:358]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\etc\system\README\)
MSI (s) (54:B4) [16:04:28:358]: Executing op: SetSourceFolder(Folder=1\w89duo8g\etc\system\README\|SplunkUniversalForwarder\etc\system\README\)
MSI (s) (54:B4) [16:04:28:358]: Executing op: FileCopy(SourceName=whlv3raq.rul|conf_checker.rules,SourceCabKey=filD4D56383824F00E6351FCDC89BE8BF9A,DestName=conf_checker.rules,Attributes=512,FileSize=3526,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=1752859857,HashPart2=-765570822,HashPart3=1907461911,HashPart4=1205365350,,)
MSI (s) (54:B4) [16:04:28:358]: File: C:\Program Files\SplunkUniversalForwarder\etc\system\README\conf_checker.rules; To be installed; Won't patch; No existing file
MSI (s) (54:B4) [16:04:28:358]: Source for file 'filD4D56383824F00E6351FCDC89BE8BF9A' is compressed
InstallFiles: File: conf_checker.rules, Directory: C:\Program Files\SplunkUniversalForwarder\etc\system\README\, Size: 3526
MSI (s) (54:B4) [16:04:28:358]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\etc\apps\introspection_generator_addon\default\)
MSI (s) (54:B4) [16:04:28:358]: Executing op: SetSourceFolder(Folder=1\w89duo8g\etc\apps\5ei81amz\default\|SplunkUniversalForwarder\etc\apps\introspection_generator_addon\default\)
MSI (s) (54:B4) [16:04:28:358]: Executing op: FileCopy(SourceName=tmw5srmp.con|server.conf,SourceCabKey=filD619FFAFB6B1C8F7BA3D26FB28FB1768,DestName=server.conf,Attributes=512,FileSize=583,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=-1238896878,HashPart2=473441721,HashPart3=-680108039,HashPart4=-523010831,,)
MSI (s) (54:B4) [16:04:28:358]: File: C:\Program Files\SplunkUniversalForwarder\etc\apps\introspection_generator_addon\default\server.conf; To be installed; Won't patch; No existing file
MSI (s) (54:B4) [16:04:28:358]: Source for file 'filD619FFAFB6B1C8F7BA3D26FB28FB1768' is compressed
InstallFiles: File: server.conf, Directory: C:\Program Files\SplunkUniversalForwarder\etc\apps\introspection_generator_addon\default\, Size: 583
MSI (s) (54:B4) [16:04:28:373]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\bin\scripts\)
MSI (s) (54:B4) [16:04:28:373]: Executing op: SetSourceFolder(Folder=1\w89duo8g\bin\scripts\|SplunkUniversalForwarder\bin\scripts\)
MSI (s) (54:B4) [16:04:28:373]: Executing op: FileCopy(SourceName=tuc7ntwr.pat|splunk-winprintmon.path,SourceCabKey=filD97C53DE6B834A4939F31E1CAC01EDD4,DestName=splunk-winprintmon.path,Attributes=512,FileSize=41,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=-393448271,HashPart2=-1158092476,HashPart3=78500914,HashPart4=-1367125553,,)
MSI (s) (54:B4) [16:04:28:373]: File: C:\Program Files\SplunkUniversalForwarder\bin\scripts\splunk-winprintmon.path; To be installed; Won't patch; No existing file
MSI (s) (54:B4) [16:04:28:373]: Source for file 'filD97C53DE6B834A4939F31E1CAC01EDD4' is compressed
InstallFiles: File: splunk-winprintmon.path, Directory: C:\Program Files\SplunkUniversalForwarder\bin\scripts\, Size: 41
MSI (s) (54:B4) [16:04:28:373]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\etc\myinstall\)
MSI (s) (54:B4) [16:04:28:373]: Executing op: SetSourceFolder(Folder=1\w89duo8g\etc\rvkc0wmc\|SplunkUniversalForwarder\etc\myinstall\)
MSI (s) (54:B4) [16:04:28:373]: Executing op: FileCopy(SourceName=y_csbwbq.cfg|splunkd.xml.cfg-default,SourceCabKey=filD9DFDBC2FA9CCABCCC2C7DE8D03CE5B9,DestName=splunkd.xml.cfg-default,Attributes=512,FileSize=2630,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=1775169720,HashPart2=127471788,HashPart3=566152619,HashPart4=-2070358580,,)
MSI (s) (54:B4) [16:04:28:373]: File: C:\Program Files\SplunkUniversalForwarder\etc\myinstall\splunkd.xml.cfg-default; To be installed; Won't patch; No existing file
MSI (s) (54:B4) [16:04:28:373]: Source for file 'filD9DFDBC2FA9CCABCCC2C7DE8D03CE5B9' is compressed
InstallFiles: File: splunkd.xml.cfg-default, Directory: C:\Program Files\SplunkUniversalForwarder\etc\myinstall\, Size: 2630
MSI (s) (54:B4) [16:04:28:373]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\etc\system\default\)
MSI (s) (54:B4) [16:04:28:373]: Executing op: SetSourceFolder(Folder=1\w89duo8g\etc\system\default\|SplunkUniversalForwarder\etc\system\default\)
MSI (s) (54:B4) [16:04:28:373]: Executing op: FileCopy(SourceName=qyjdmaih.con|restmap.conf,SourceCabKey=filDE5F6124A3D27D55FFF17514A3133298,DestName=restmap.conf,Attributes=512,FileSize=48215,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=-31183135,HashPart2=889364857,HashPart3=-82932192,HashPart4=1065689284,,)
MSI (s) (54:B4) [16:04:28:373]: File: C:\Program Files\SplunkUniversalForwarder\etc\system\default\restmap.conf; To be installed; Won't patch; No existing file
MSI (s) (54:B4) [16:04:28:373]: Source for file 'filDE5F6124A3D27D55FFF17514A3133298' is compressed
InstallFiles: File: restmap.conf, Directory: C:\Program Files\SplunkUniversalForwarder\etc\system\default\, Size: 48215
MSI (s) (54:B4) [16:04:28:373]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\etc\apps\learned\metadata\)
MSI (s) (54:B4) [16:04:28:373]: Executing op: SetSourceFolder(Folder=1\w89duo8g\etc\apps\learned\metadata\|SplunkUniversalForwarder\etc\apps\learned\metadata\)
MSI (s) (54:B4) [16:04:28:373]: Executing op: FileCopy(SourceName=t3qlrfs_.met|default.meta,SourceCabKey=filE0D326240FED5E2E1E015D4D5D9B178F,DestName=default.meta,Attributes=512,FileSize=525,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=958629896,HashPart2=90516557,HashPart3=-98478823,HashPart4=-1306225845,,)
MSI (s) (54:B4) [16:04:28:373]: File: C:\Program Files\SplunkUniversalForwarder\etc\apps\learned\metadata\default.meta; To be installed; Won't patch; No existing file
MSI (s) (54:B4) [16:04:28:373]: Source for file 'filE0D326240FED5E2E1E015D4D5D9B178F' is compressed
InstallFiles: File: default.meta, Directory: C:\Program Files\SplunkUniversalForwarder\etc\apps\learned\metadata\, Size: 525
MSI (s) (54:B4) [16:04:28:373]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\etc\modules\input\structuredparsing\)
MSI (s) (54:B4) [16:04:28:373]: Executing op: SetSourceFolder(Folder=1\w89duo8g\etc\modules\input\e7vfx0je\|SplunkUniversalForwarder\etc\modules\input\structuredparsing\)
MSI (s) (54:B4) [16:04:28:373]: Executing op: FileCopy(SourceName=config.xml,SourceCabKey=filE158C964C2D08AE6008CEC934ED27F3C,DestName=config.xml,Attributes=512,FileSize=1108,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=1100889280,HashPart2=774302061,HashPart3=-866280784,HashPart4=2112573662,,)
MSI (s) (54:B4) [16:04:28:373]: File: C:\Program Files\SplunkUniversalForwarder\etc\modules\input\structuredparsing\config.xml; To be installed; Won't patch; No existing file
MSI (s) (54:B4) [16:04:28:373]: Source for file 'filE158C964C2D08AE6008CEC934ED27F3C' is compressed
InstallFiles: File: config.xml, Directory: C:\Program Files\SplunkUniversalForwarder\etc\modules\input\structuredparsing\, Size: 1108
MSI (s) (54:B4) [16:04:28:373]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\etc\system\README\)
MSI (s) (54:B4) [16:04:28:373]: Executing op: SetSourceFolder(Folder=1\w89duo8g\etc\system\README\|SplunkUniversalForwarder\etc\system\README\)
MSI (s) (54:B4) [16:04:28:373]: Executing op: FileCopy(SourceName=pwerb9fw.exa|web.conf.example,SourceCabKey=filE2FBEDA27E54BE02B13139657FBA090C,DestName=web.conf.example,Attributes=512,FileSize=920,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=-402485011,HashPart2=2145423931,HashPart3=720014831,HashPart4=1020285237,,)
MSI (s) (54:B4) [16:04:28:373]: File: C:\Program Files\SplunkUniversalForwarder\etc\system\README\web.conf.example; To be installed; Won't patch; No existing file
MSI (s) (54:B4) [16:04:28:373]: Source for file 'filE2FBEDA27E54BE02B13139657FBA090C' is compressed
InstallFiles: File: web.conf.example, Directory: C:\Program Files\SplunkUniversalForwarder\etc\system\README\, Size: 920
MSI (s) (54:B4) [16:04:28:373]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\etc\system\bin\)
MSI (s) (54:B4) [16:04:28:373]: Executing op: SetSourceFolder(Folder=1\w89duo8g\etc\system\bin\|SplunkUniversalForwarder\etc\system\bin\)
MSI (s) (54:B4) [16:04:28:373]: Executing op: FileCopy(SourceName=nrrhbkb9.cmd|WinHostMon.cmd,SourceCabKey=filE54EFB65BE4AC503859BABC22793B712,DestName=WinHostMon.cmd,Attributes=512,FileSize=1267,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=1676648558,HashPart2=615957649,HashPart3=-960169033,HashPart4=135725969,,)
MSI (s) (54:B4) [16:04:28:373]: File: C:\Program Files\SplunkUniversalForwarder\etc\system\bin\WinHostMon.cmd; To be installed; Won't patch; No existing file
MSI (s) (54:B4) [16:04:28:373]: Source for file 'filE54EFB65BE4AC503859BABC22793B712' is compressed
InstallFiles: File: WinHostMon.cmd, Directory: C:\Program Files\SplunkUniversalForwarder\etc\system\bin\, Size: 1267
MSI (s) (54:B4) [16:04:28:389]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\etc\)
MSI (s) (54:B4) [16:04:28:389]: Executing op: SetSourceFolder(Folder=1\w89duo8g\etc\|SplunkUniversalForwarder\etc\)
MSI (s) (54:B4) [16:04:28:389]: Executing op: FileCopy(SourceName=hg-7bzy2.def|splunk-launch.conf.default,SourceCabKey=filE550630C59BE49F0D46A6129D15980A9,DestName=splunk-launch.conf.default,Attributes=512,FileSize=576,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=338462426,HashPart2=247832904,HashPart3=1234898157,HashPart4=1017876501,,)
MSI (s) (54:B4) [16:04:28:389]: File: C:\Program Files\SplunkUniversalForwarder\etc\splunk-launch.conf.default; To be installed; Won't patch; No existing file
MSI (s) (54:B4) [16:04:28:389]: Source for file 'filE550630C59BE49F0D46A6129D15980A9' is compressed
InstallFiles: File: splunk-launch.conf.default, Directory: C:\Program Files\SplunkUniversalForwarder\etc\, Size: 576
MSI (s) (54:B4) [16:04:28:389]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\bin\)
MSI (s) (54:B4) [16:04:28:389]: Executing op: SetSourceFolder(Folder=1\w89duo8g\bin\|SplunkUniversalForwarder\bin\)
MSI (s) (54:B4) [16:04:28:389]: Executing op: FileCopy(SourceName=nhlpshd_.sys|splknetdrv-win7.sys,SourceCabKey=filE5B765EF815A414C21CB68EC48B28F44,DestName=splknetdrv-win7.sys,Attributes=512,FileSize=40928,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=6.2.9200.16384,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (54:B4) [16:04:28:389]: File: C:\Program Files\SplunkUniversalForwarder\bin\splknetdrv-win7.sys; To be installed; Won't patch; No existing file
MSI (s) (54:B4) [16:04:28:389]: Source for file 'filE5B765EF815A414C21CB68EC48B28F44' is compressed
InstallFiles: File: splknetdrv-win7.sys, Directory: C:\Program Files\SplunkUniversalForwarder\bin\, Size: 40928
MSI (s) (54:B4) [16:04:28:389]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\etc\system\README\)
MSI (s) (54:B4) [16:04:28:389]: Executing op: SetSourceFolder(Folder=1\w89duo8g\etc\system\README\|SplunkUniversalForwarder\etc\system\README\)
MSI (s) (54:B4) [16:04:28:389]: Executing op: FileCopy(SourceName=9tjixoh6.spe|default-mode.conf.spec,SourceCabKey=filE7144236650EDCFA2FC9F485AC4E5BF8,DestName=default-mode.conf.spec,Attributes=512,FileSize=2494,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=-1840011313,HashPart2=1590916177,HashPart3=-1385543762,HashPart4=656382640,,)
MSI (s) (54:B4) [16:04:28:389]: File: C:\Program Files\SplunkUniversalForwarder\etc\system\README\default-mode.conf.spec; To be installed; Won't patch; No existing file
MSI (s) (54:B4) [16:04:28:389]: Source for file 'filE7144236650EDCFA2FC9F485AC4E5BF8' is compressed
InstallFiles: File: default-mode.conf.spec, Directory: C:\Program Files\SplunkUniversalForwarder\etc\system\README\, Size: 2494
MSI (s) (54:B4) [16:04:28:389]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\bin\)
MSI (s) (54:B4) [16:04:28:389]: Executing op: SetSourceFolder(Folder=1\w89duo8g\bin\|SplunkUniversalForwarder\bin\)
MSI (s) (54:B4) [16:04:28:389]: Executing op: FileCopy(SourceName=79se5e5u.sys|splunkdrv-win6.sys,SourceCabKey=filEA35489E1085B7D7CB0FE9BEE447FE38,DestName=splunkdrv-win6.sys,Attributes=512,FileSize=34272,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=6.1.7600.16385,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (54:B4) [16:04:28:389]: File: C:\Program Files\SplunkUniversalForwarder\bin\splunkdrv-win6.sys; To be installed; Won't patch; No existing file
MSI (s) (54:B4) [16:04:28:389]: Source for file 'filEA35489E1085B7D7CB0FE9BEE447FE38' is compressed
InstallFiles: File: splunkdrv-win6.sys, Directory: C:\Program Files\SplunkUniversalForwarder\bin\, Size: 34272
MSI (s) (54:B4) [16:04:28:389]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\etc\system\default\)
MSI (s) (54:B4) [16:04:28:389]: Executing op: SetSourceFolder(Folder=1\w89duo8g\etc\system\default\|SplunkUniversalForwarder\etc\system\default\)
MSI (s) (54:B4) [16:04:28:389]: Executing op: FileCopy(SourceName=rsnjmixj.con|default-mode.conf,SourceCabKey=filEBFF6A2E88205B42731B1F512E265459,DestName=default-mode.conf,Attributes=512,FileSize=677,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=-1969968641,HashPart2=1434128744,HashPart3=-1760771766,HashPart4=-777767404,,)
MSI (s) (54:B4) [16:04:28:389]: File: C:\Program Files\SplunkUniversalForwarder\etc\system\default\default-mode.conf; To be installed; Won't patch; No existing file
MSI (s) (54:B4) [16:04:28:389]: Source for file 'filEBFF6A2E88205B42731B1F512E265459' is compressed
InstallFiles: File: default-mode.conf, Directory: C:\Program Files\SplunkUniversalForwarder\etc\system\default\, Size: 677
MSI (s) (54:B4) [16:04:28:389]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\etc\system\bin\)
MSI (s) (54:B4) [16:04:28:389]: Executing op: SetSourceFolder(Folder=1\w89duo8g\etc\system\bin\|SplunkUniversalForwarder\etc\system\bin\)
MSI (s) (54:B4) [16:04:28:389]: Executing op: FileCopy(SourceName=zo0smsek.cmd|MonitorNoHandle.cmd,SourceCabKey=filEE9472504B5E20D53BE708464E9AC19C,DestName=MonitorNoHandle.cmd,Attributes=512,FileSize=912,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=-1429205156,HashPart2=-1816211375,HashPart3=-1216295733,HashPart4=398103620,,)
MSI (s) (54:B4) [16:04:28:389]: File: C:\Program Files\SplunkUniversalForwarder\etc\system\bin\MonitorNoHandle.cmd; To be installed; Won't patch; No existing file
MSI (s) (54:B4) [16:04:28:389]: Source for file 'filEE9472504B5E20D53BE708464E9AC19C' is compressed
InstallFiles: File: MonitorNoHandle.cmd, Directory: C:\Program Files\SplunkUniversalForwarder\etc\system\bin\, Size: 912
MSI (s) (54:B4) [16:04:28:389]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\bin\scripts\)
MSI (s) (54:B4) [16:04:28:389]: Executing op: SetSourceFolder(Folder=1\w89duo8g\bin\scripts\|SplunkUniversalForwarder\bin\scripts\)
MSI (s) (54:B4) [16:04:28:389]: Executing op: FileCopy(SourceName=of04hkej.pat|splunk-admon.path,SourceCabKey=filEF5BDE4818C7F2BC2B38FC284B1AC16E,DestName=splunk-admon.path,Attributes=512,FileSize=35,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=-1545007341,HashPart2=-196277640,HashPart3=-2017954085,HashPart4=-101228961,,)
MSI (s) (54:B4) [16:04:28:389]: File: C:\Program Files\SplunkUniversalForwarder\bin\scripts\splunk-admon.path; To be installed; Won't patch; No existing file
MSI (s) (54:B4) [16:04:28:389]: Source for file 'filEF5BDE4818C7F2BC2B38FC284B1AC16E' is compressed
InstallFiles: File: splunk-admon.path, Directory: C:\Program Files\SplunkUniversalForwarder\bin\scripts\, Size: 35
MSI (s) (54:B4) [16:04:28:389]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\etc\)
MSI (s) (54:B4) [16:04:28:389]: Executing op: SetSourceFolder(Folder=1\w89duo8g\etc\|SplunkUniversalForwarder\etc\)
MSI (s) (54:B4) [16:04:28:389]: Executing op: FileCopy(SourceName=s0md8w5i.cfg|log-utility.cfg,SourceCabKey=filF44485FA794E8FB8EF67455D9A60AA46,DestName=log-utility.cfg,Attributes=512,FileSize=1131,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=-1859161456,HashPart2=1294453412,HashPart3=-68463548,HashPart4=1181954202,,)
MSI (s) (54:B4) [16:04:28:389]: File: C:\Program Files\SplunkUniversalForwarder\etc\log-utility.cfg; To be installed; Won't patch; No existing file
MSI (s) (54:B4) [16:04:28:389]: Source for file 'filF44485FA794E8FB8EF67455D9A60AA46' is compressed
InstallFiles: File: log-utility.cfg, Directory: C:\Program Files\SplunkUniversalForwarder\etc\, Size: 1131
MSI (s) (54:B4) [16:04:28:405]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\bin\)
MSI (s) (54:B4) [16:04:28:405]: Executing op: SetSourceFolder(Folder=1\w89duo8g\bin\|SplunkUniversalForwarder\bin\)
MSI (s) (54:B4) [16:04:28:405]: Executing op: FileCopy(SourceName=bubb4mie.cat|SplunkMonitorNoHandledrv-win8.cat,SourceCabKey=filF4ACFE00FE54A2C3543A0068A211DC1B,DestName=SplunkMonitorNoHandledrv-win8.cat,Attributes=512,FileSize=6297,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=1365926221,HashPart2=-597009026,HashPart3=2037079237,HashPart4=1884140552,,)
MSI (s) (54:B4) [16:04:28:405]: File: C:\Program Files\SplunkUniversalForwarder\bin\SplunkMonitorNoHandledrv-win8.cat; To be installed; Won't patch; No existing file
MSI (s) (54:B4) [16:04:28:405]: Source for file 'filF4ACFE00FE54A2C3543A0068A211DC1B' is compressed
InstallFiles: File: SplunkMonitorNoHandledrv-win8.cat, Directory: C:\Program Files\SplunkUniversalForwarder\bin\, Size: 6297
MSI (s) (54:B4) [16:04:28:405]: Executing op: FileCopy(SourceName=libxml2.dll,SourceCabKey=filF52C889D89C9C48B58CB82000E42309F,DestName=libxml2.dll,Attributes=512,FileSize=1305320,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=-379708292,HashPart2=356245692,HashPart3=-604055143,HashPart4=-362367791,,)
MSI (s) (54:B4) [16:04:28:405]: File: C:\Program Files\SplunkUniversalForwarder\bin\libxml2.dll; To be installed; Won't patch; No existing file
MSI (s) (54:B4) [16:04:28:405]: Source for file 'filF52C889D89C9C48B58CB82000E42309F' is compressed
InstallFiles: File: libxml2.dll, Directory: C:\Program Files\SplunkUniversalForwarder\bin\, Size: 1305320
MSI (s) (54:B4) [16:04:28:405]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\etc\system\README\)
MSI (s) (54:B4) [16:04:28:405]: Executing op: SetSourceFolder(Folder=1\w89duo8g\etc\system\README\|SplunkUniversalForwarder\etc\system\README\)
MSI (s) (54:B4) [16:04:28:405]: Executing op: FileCopy(SourceName=z26vte3h.spe|collections.conf.spec,SourceCabKey=filF6B10CC7315ECD01E870EB7E0329F765,DestName=collections.conf.spec,Attributes=512,FileSize=2298,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=-1078162366,HashPart2=1049040384,HashPart3=788575520,HashPart4=-759108301,,)
MSI (s) (54:B4) [16:04:28:405]: File: C:\Program Files\SplunkUniversalForwarder\etc\system\README\collections.conf.spec; To be installed; Won't patch; No existing file
MSI (s) (54:B4) [16:04:28:405]: Source for file 'filF6B10CC7315ECD01E870EB7E0329F765' is compressed
InstallFiles: File: collections.conf.spec, Directory: C:\Program Files\SplunkUniversalForwarder\etc\system\README\, Size: 2298
MSI (s) (54:B4) [16:04:28:420]: Executing op: FileCopy(SourceName=pqjrc8wd.exa|default-mode.conf.examples,SourceCabKey=filF870272E534F7B53F3A5A848BE86AAE2,DestName=default-mode.conf.examples,Attributes=512,FileSize=207,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=1621584116,HashPart2=892404512,HashPart3=2015738721,HashPart4=1438714143,,)
MSI (s) (54:B4) [16:04:28:420]: File: C:\Program Files\SplunkUniversalForwarder\etc\system\README\default-mode.conf.examples; To be installed; Won't patch; No existing file
MSI (s) (54:B4) [16:04:28:420]: Source for file 'filF870272E534F7B53F3A5A848BE86AAE2' is compressed
InstallFiles: File: default-mode.conf.examples, Directory: C:\Program Files\SplunkUniversalForwarder\etc\system\README\, Size: 207
MSI (s) (54:B4) [16:04:28:420]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\etc\apps\introspection_generator_addon\default\)
MSI (s) (54:B4) [16:04:28:420]: Executing op: SetSourceFolder(Folder=1\w89duo8g\etc\apps\5ei81amz\default\|SplunkUniversalForwarder\etc\apps\introspection_generator_addon\default\)
MSI (s) (54:B4) [16:04:28:420]: Executing op: FileCopy(SourceName=xvvwyic1.con|inputs.conf,SourceCabKey=filF9432BD9CC4347790758EF6BF7936A4B,DestName=inputs.conf,Attributes=512,FileSize=191,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=567385207,HashPart2=760856646,HashPart3=794055824,HashPart4=-2054005150,,)
MSI (s) (54:B4) [16:04:28:420]: File: C:\Program Files\SplunkUniversalForwarder\etc\apps\introspection_generator_addon\default\inputs.conf; To be installed; Won't patch; No existing file
MSI (s) (54:B4) [16:04:28:420]: Source for file 'filF9432BD9CC4347790758EF6BF7936A4B' is compressed
InstallFiles: File: inputs.conf, Directory: C:\Program Files\SplunkUniversalForwarder\etc\apps\introspection_generator_addon\default\, Size: 191
MSI (s) (54:B4) [16:04:28:420]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\bin\)
MSI (s) (54:B4) [16:04:28:420]: Executing op: SetSourceFolder(Folder=1\w89duo8g\bin\|SplunkUniversalForwarder\bin\)
MSI (s) (54:B4) [16:04:28:420]: Executing op: FileCopy(SourceName=mpjfs_qk.inf|splknetdrv-win7.inf,SourceCabKey=filF97B48E5E2A6400DFCB267D68DE68664,DestName=splknetdrv-win7.inf,Attributes=512,FileSize=1846,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=1662700500,HashPart2=1911093547,HashPart3=1574979373,HashPart4=-1596595740,,)
MSI (s) (54:B4) [16:04:28:420]: File: C:\Program Files\SplunkUniversalForwarder\bin\splknetdrv-win7.inf; To be installed; Won't patch; No existing file
MSI (s) (54:B4) [16:04:28:420]: Source for file 'filF97B48E5E2A6400DFCB267D68DE68664' is compressed
InstallFiles: File: splknetdrv-win7.inf, Directory: C:\Program Files\SplunkUniversalForwarder\bin\, Size: 1846
MSI (s) (54:B4) [16:04:28:420]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\etc\system\README\)
MSI (s) (54:B4) [16:04:28:420]: Executing op: SetSourceFolder(Folder=1\w89duo8g\etc\system\README\|SplunkUniversalForwarder\etc\system\README\)
MSI (s) (54:B4) [16:04:28:420]: Executing op: FileCopy(SourceName=ubm8l9vy.exa|sourcetypes.conf.example,SourceCabKey=filFA65D2879F5FAC343FA589A0139E7BE7,DestName=sourcetypes.conf.example,Attributes=512,FileSize=1086,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=-694849920,HashPart2=1259385863,HashPart3=979863441,HashPart4=-1974829627,,)
MSI (s) (54:B4) [16:04:28:420]: File: C:\Program Files\SplunkUniversalForwarder\etc\system\README\sourcetypes.conf.example; To be installed; Won't patch; No existing file
MSI (s) (54:B4) [16:04:28:420]: Source for file 'filFA65D2879F5FAC343FA589A0139E7BE7' is compressed
InstallFiles: File: sourcetypes.conf.example, Directory: C:\Program Files\SplunkUniversalForwarder\etc\system\README\, Size: 1086
MSI (s) (54:B4) [16:04:28:420]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\bin\)
MSI (s) (54:B4) [16:04:28:420]: Executing op: SetSourceFolder(Folder=1\w89duo8g\bin\|SplunkUniversalForwarder\bin\)
MSI (s) (54:B4) [16:04:28:420]: Executing op: FileCopy(SourceName=kv-ra-al.exe|splunk-regmon.exe,SourceCabKey=filFBF34708A5241EC1A74E1286DA84CC35,DestName=splunk-regmon.exe,Attributes=512,FileSize=12169960,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=1538.512.0.58998,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (54:B4) [16:04:28:420]: File: C:\Program Files\SplunkUniversalForwarder\bin\splunk-regmon.exe; To be installed; Won't patch; No existing file
MSI (s) (54:B4) [16:04:28:420]: Source for file 'filFBF34708A5241EC1A74E1286DA84CC35' is compressed
InstallFiles: File: splunk-regmon.exe, Directory: C:\Program Files\SplunkUniversalForwarder\bin\, Size: 12169960
MSI (s) (54:B4) [16:04:28:498]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\etc\system\README\)
MSI (s) (54:B4) [16:04:28:498]: Executing op: SetSourceFolder(Folder=1\w89duo8g\etc\system\README\|SplunkUniversalForwarder\etc\system\README\)
MSI (s) (54:B4) [16:04:28:498]: Executing op: FileCopy(SourceName=9jlltycw.spe|authorize.conf.spec,SourceCabKey=filFD51B4C3835A24C6B8CAC889984405E0,DestName=authorize.conf.spec,Attributes=512,FileSize=12960,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=170916414,HashPart2=-716700971,HashPart3=1376190668,HashPart4=-1428080653,,)
MSI (s) (54:B4) [16:04:28:498]: File: C:\Program Files\SplunkUniversalForwarder\etc\system\README\authorize.conf.spec; To be installed; Won't patch; No existing file
MSI (s) (54:B4) [16:04:28:498]: Source for file 'filFD51B4C3835A24C6B8CAC889984405E0' is compressed
InstallFiles: File: authorize.conf.spec, Directory: C:\Program Files\SplunkUniversalForwarder\etc\system\README\, Size: 12960
MSI (s) (54:B4) [16:04:28:514]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\bin\scripts\)
MSI (s) (54:B4) [16:04:28:514]: Executing op: SetSourceFolder(Folder=1\w89duo8g\bin\scripts\|SplunkUniversalForwarder\bin\scripts\)
MSI (s) (54:B4) [16:04:28:514]: Executing op: FileCopy(SourceName=readme.txt,SourceCabKey=filFE6A0771DA2B61AD8223323945E3626D,DestName=readme.txt,Attributes=512,FileSize=72,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=705772572,HashPart2=-1438055806,HashPart3=-1053469802,HashPart4=-1710447731,,)
MSI (s) (54:B4) [16:04:28:514]: File: C:\Program Files\SplunkUniversalForwarder\bin\scripts\readme.txt; To be installed; Won't patch; No existing file
MSI (s) (54:B4) [16:04:28:514]: Source for file 'filFE6A0771DA2B61AD8223323945E3626D' is compressed
InstallFiles: File: readme.txt, Directory: C:\Program Files\SplunkUniversalForwarder\bin\scripts\, Size: 72
MSI (s) (54:B4) [16:04:28:514]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\etc\system\bin\)
MSI (s) (54:B4) [16:04:28:514]: Executing op: SetSourceFolder(Folder=1\w89duo8g\etc\system\bin\|SplunkUniversalForwarder\etc\system\bin\)
MSI (s) (54:B4) [16:04:28:514]: Executing op: FileCopy(SourceName=admon.cmd,SourceCabKey=filFE70A95131D4D08233615C3620D8FAA5,DestName=admon.cmd,Attributes=512,FileSize=3413,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=-831349468,HashPart2=993671563,HashPart3=584349712,HashPart4=-2015083932,,)
MSI (s) (54:B4) [16:04:28:514]: File: C:\Program Files\SplunkUniversalForwarder\etc\system\bin\admon.cmd; To be installed; Won't patch; No existing file
MSI (s) (54:B4) [16:04:28:514]: Source for file 'filFE70A95131D4D08233615C3620D8FAA5' is compressed
InstallFiles: File: admon.cmd, Directory: C:\Program Files\SplunkUniversalForwarder\etc\system\bin\, Size: 3413
MSI (s) (54:B4) [16:04:28:514]: Executing op: FileCopy(SourceName=1n0tisfz.cmd|WinNetMon.cmd,SourceCabKey=filFFC45AA09571FD1DE4BFDE4BBED99448,DestName=WinNetMon.cmd,Attributes=512,FileSize=6142,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=-860477231,HashPart2=-1401499568,HashPart3=-226500488,HashPart4=-734710106,,)
MSI (s) (54:B4) [16:04:28:514]: File: C:\Program Files\SplunkUniversalForwarder\etc\system\bin\WinNetMon.cmd; To be installed; Won't patch; No existing file
MSI (s) (54:B4) [16:04:28:514]: Source for file 'filFFC45AA09571FD1DE4BFDE4BBED99448' is compressed
InstallFiles: File: WinNetMon.cmd, Directory: C:\Program Files\SplunkUniversalForwarder\etc\system\bin\, Size: 6142
MSI (s) (54:B4) [16:04:28:514]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\etc\apps\SplunkUniversalForwarder\default\)
MSI (s) (54:B4) [16:04:28:514]: Executing op: SetSourceFolder(Folder=1\w89duo8g\etc\apps\0k4ci1p3\default\|SplunkUniversalForwarder\etc\apps\SplunkUniversalForwarder\default\)
MSI (s) (54:B4) [16:04:28:514]: Executing op: FileCopy(SourceName=ssmotatu.con|web.conf,SourceCabKey=filFFD0A48B92D564AD2586EEDC3AF570B4,DestName=web.conf,Attributes=512,FileSize=83,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=-1838753739,HashPart2=1510157665,HashPart3=-1325655310,HashPart4=1966116675,,)
MSI (s) (54:B4) [16:04:28:514]: File: C:\Program Files\SplunkUniversalForwarder\etc\apps\SplunkUniversalForwarder\default\web.conf; To be installed; Won't patch; No existing file
MSI (s) (54:B4) [16:04:28:514]: Source for file 'filFFD0A48B92D564AD2586EEDC3AF570B4' is compressed
InstallFiles: File: web.conf, Directory: C:\Program Files\SplunkUniversalForwarder\etc\apps\SplunkUniversalForwarder\default\, Size: 83
MSI (s) (54:B4) [16:04:28:514]: Executing op: CacheSizeFlush(,)
MSI (s) (54:B4) [16:04:28:514]: Executing op: ActionStart(Name=RollbackRegmonDrv,,)
Action 16:04:28: RollbackRegmonDrv.
MSI (s) (54:B4) [16:04:28:514]: Executing op: CustomActionSchedule(Action=RollbackRegmonDrv,ActionType=3329,Source=BinaryData,Target=UninstallRegmonDrvCA,CustomActionData=SplunkHome=C:\Program Files\SplunkUniversalForwarder\;FailCA=)
MSI (s) (54:B4) [16:04:28:530]: Executing op: ActionStart(Name=InstallRegmonDrv,,)
Action 16:04:28: InstallRegmonDrv.
MSI (s) (54:B4) [16:04:28:530]: Executing op: CustomActionSchedule(Action=InstallRegmonDrv,ActionType=3073,Source=BinaryData,Target=InstallRegmonDrvCA,CustomActionData=SplunkHome=C:\Program Files\SplunkUniversalForwarder\;LEGACYDRV=1;FailCA=)
MSI (s) (54:B4) [16:04:28:530]: Creating MSIHANDLE (83) of type 790536 for thread 9652
MSI (s) (54:AC) [16:04:28:530]: Invoking remote custom action. DLL: C:\Windows\Installer\MSI383F.tmp, Entrypoint: InstallRegmonDrvCA
MSI (s) (54:74) [16:04:28:530]: Generating random cookie.
MSI (s) (54:74) [16:04:28:530]: Created Custom Action Server with PID 3012 (0xBC4).
MSI (s) (54:50) [16:04:28:545]: Running as a service.
MSI (s) (54:50) [16:04:28:545]: Hello, I'm your 64bit Elevated custom action server.
MSI (s) (54!08) [16:04:28:561]: Creating MSIHANDLE (84) of type 790531 for thread 10248
InstallRegmonDrv: Entering InstallRegmonDrv in C:\Windows\Installer\MSI383F.tmp, version 0.0.0.0
MSI (s) (54!08) [16:04:28:561]: Closing MSIHANDLE (84) of type 790531 for thread 10248
MSI (s) (54!08) [16:04:28:561]: Creating MSIHANDLE (85) of type 790531 for thread 10248
InstallRegmonDrv: Debug:found 3 properties.
MSI (s) (54!08) [16:04:28:561]: Closing MSIHANDLE (85) of type 790531 for thread 10248
MSI (s) (54!08) [16:04:28:561]: Creating MSIHANDLE (86) of type 790531 for thread 10248
InstallRegmonDrv: Warning: Invalid property ignored: FailCA=.
MSI (s) (54!08) [16:04:28:561]: Closing MSIHANDLE (86) of type 790531 for thread 10248
MSI (s) (54!08) [16:04:28:561]: Creating MSIHANDLE (87) of type 790531 for thread 10248
InstallRegmonDrv: Info: Driver inf file: C:\Program Files\SplunkUniversalForwarder\bin\splunkdrv-win6.inf.
MSI (s) (54!08) [16:04:28:561]: Closing MSIHANDLE (87) of type 790531 for thread 10248
MSI (s) (54:AC) [16:04:28:655]: Closing MSIHANDLE (83) of type 790536 for thread 9652
MSI (s) (54:B4) [16:04:28:655]: Executing op: ActionStart(Name=RollbackNetmonDrv,,)
Action 16:04:28: RollbackNetmonDrv.
MSI (s) (54:B4) [16:04:28:655]: Executing op: CustomActionSchedule(Action=RollbackNetmonDrv,ActionType=3329,Source=BinaryData,Target=UninstallNetmonDrvCA,CustomActionData=SplunkHome=C:\Program Files\SplunkUniversalForwarder\;FailCA=)
MSI (s) (54:B4) [16:04:28:655]: Executing op: ActionStart(Name=InstallNetmonDrv,,)
Action 16:04:28: InstallNetmonDrv.
MSI (s) (54:B4) [16:04:28:655]: Executing op: CustomActionSchedule(Action=InstallNetmonDrv,ActionType=3073,Source=BinaryData,Target=InstallNetmonDrvCA,CustomActionData=SplunkHome=C:\Program Files\SplunkUniversalForwarder\;LEGACYDRV=1;FailCA=)
MSI (s) (54:B4) [16:04:28:655]: Creating MSIHANDLE (88) of type 790536 for thread 9652
MSI (s) (54:B0) [16:04:28:655]: Invoking remote custom action. DLL: C:\Windows\Installer\MSI38BD.tmp, Entrypoint: InstallNetmonDrvCA
MSI (s) (54!F4) [16:04:28:670]: Creating MSIHANDLE (89) of type 790531 for thread 10228
InstallNetmonDrv: Entering InstallNetmonDrv in C:\Windows\Installer\MSI38BD.tmp, version 0.0.0.0
MSI (s) (54!F4) [16:04:28:670]: Closing MSIHANDLE (89) of type 790531 for thread 10228
MSI (s) (54!F4) [16:04:28:670]: Creating MSIHANDLE (90) of type 790531 for thread 10228
InstallNetmonDrv: Debug:found 3 properties.
MSI (s) (54!F4) [16:04:28:670]: Closing MSIHANDLE (90) of type 790531 for thread 10228
MSI (s) (54!F4) [16:04:28:670]: Creating MSIHANDLE (91) of type 790531 for thread 10228
InstallNetmonDrv: Warning: Invalid property ignored: FailCA=.
MSI (s) (54!F4) [16:04:28:670]: Closing MSIHANDLE (91) of type 790531 for thread 10228
MSI (s) (54!F4) [16:04:28:670]: Creating MSIHANDLE (92) of type 790531 for thread 10228
InstallNetmonDrv: Info: Driver inf file: C:\Program Files\SplunkUniversalForwarder\bin\splknetdrv-vista.inf.
MSI (s) (54!F4) [16:04:28:670]: Closing MSIHANDLE (92) of type 790531 for thread 10228
MSI (s) (54:B0) [16:04:28:717]: Closing MSIHANDLE (88) of type 790536 for thread 9652
MSI (s) (54:B4) [16:04:28:717]: Executing op: ActionStart(Name=RollbackNohandleDrv,,)
Action 16:04:28: RollbackNohandleDrv.
MSI (s) (54:B4) [16:04:28:717]: Executing op: CustomActionSchedule(Action=RollbackNohandleDrv,ActionType=3329,Source=BinaryData,Target=UninstallNohandleDrvCA,CustomActionData=SplunkHome=C:\Program Files\SplunkUniversalForwarder\;FailCA=)
MSI (s) (54:B4) [16:04:28:717]: Executing op: ActionStart(Name=InstallNohandleDrv,,)
Action 16:04:28: InstallNohandleDrv.
MSI (s) (54:B4) [16:04:28:717]: Executing op: CustomActionSchedule(Action=InstallNohandleDrv,ActionType=3073,Source=BinaryData,Target=InstallNohandleDrvCA,CustomActionData=SplunkHome=C:\Program Files\SplunkUniversalForwarder\;LEGACYDRV=1;FailCA=)
MSI (s) (54:B4) [16:04:28:717]: Creating MSIHANDLE (93) of type 790536 for thread 9652
MSI (s) (54:68) [16:04:28:717]: Invoking remote custom action. DLL: C:\Windows\Installer\MSI38FC.tmp, Entrypoint: InstallNohandleDrvCA
MSI (s) (54!14) [16:04:28:733]: Creating MSIHANDLE (94) of type 790531 for thread 8724
InstallNohandleDrv: Entering InstallNohandleDrv in C:\Windows\Installer\MSI38FC.tmp, version 0.0.0.0
MSI (s) (54!14) [16:04:28:733]: Closing MSIHANDLE (94) of type 790531 for thread 8724
MSI (s) (54!14) [16:04:28:733]: Creating MSIHANDLE (95) of type 790531 for thread 8724
InstallNohandleDrv: Debug:found 3 properties.
MSI (s) (54!14) [16:04:28:733]: Closing MSIHANDLE (95) of type 790531 for thread 8724
MSI (s) (54!14) [16:04:28:733]: Creating MSIHANDLE (96) of type 790531 for thread 8724
InstallNohandleDrv: Warning: Invalid property ignored: FailCA=.
MSI (s) (54!14) [16:04:28:733]: Closing MSIHANDLE (96) of type 790531 for thread 8724
MSI (s) (54!14) [16:04:28:733]: Creating MSIHANDLE (97) of type 790531 for thread 8724
InstallNohandleDrv: Info: Driver inf file: C:\Program Files\SplunkUniversalForwarder\bin\SplunkMonitorNoHandleDrv-vista.inf.
MSI (s) (54!14) [16:04:28:733]: Closing MSIHANDLE (97) of type 790531 for thread 8724
MSI (s) (54:68) [16:04:28:780]: Closing MSIHANDLE (93) of type 790536 for thread 9652
MSI (s) (54:B4) [16:04:28:780]: Executing op: ActionStart(Name=CreateFtr,,)
Action 16:04:28: CreateFtr.
MSI (s) (54:B4) [16:04:28:780]: Executing op: CustomActionSchedule(Action=CreateFtr,ActionType=3073,Source=BinaryData,Target=CreateFtrCA,CustomActionData=SplunkHome=C:\Program Files\SplunkUniversalForwarder\;FailCA=)
MSI (s) (54:B4) [16:04:28:780]: Creating MSIHANDLE (98) of type 790536 for thread 9652
MSI (s) (54:3C) [16:04:28:780]: Invoking remote custom action. DLL: C:\Windows\Installer\MSI393C.tmp, Entrypoint: CreateFtrCA
MSI (s) (54!DC) [16:04:28:780]: Creating MSIHANDLE (99) of type 790531 for thread 5340
CreateFtr: Entering CreateFtr in C:\Windows\Installer\MSI393C.tmp, version 0.0.0.0
MSI (s) (54!DC) [16:04:28:780]: Closing MSIHANDLE (99) of type 790531 for thread 5340
MSI (s) (54!DC) [16:04:28:780]: Creating MSIHANDLE (100) of type 790531 for thread 5340
CreateFtr: Debug:found 2 properties.
MSI (s) (54!DC) [16:04:28:795]: Closing MSIHANDLE (100) of type 790531 for thread 5340
MSI (s) (54!DC) [16:04:28:795]: Creating MSIHANDLE (101) of type 790531 for thread 5340
CreateFtr: Warning: Invalid property ignored: FailCA=.
MSI (s) (54!DC) [16:04:28:795]: Closing MSIHANDLE (101) of type 790531 for thread 5340
MSI (s) (54:3C) [16:04:28:795]: Closing MSIHANDLE (98) of type 790536 for thread 9652
MSI (s) (54:B4) [16:04:28:795]: Executing op: ActionStart(Name=FirstTimeRun,,)
Action 16:04:28: FirstTimeRun.
MSI (s) (54:B4) [16:04:28:795]: Executing op: CustomActionSchedule(Action=FirstTimeRun,ActionType=3073,Source=BinaryData,Target=FirstTimeRunCA,CustomActionData=SplunkHome=C:\Program Files\SplunkUniversalForwarder\;FailCA=)
MSI (s) (54:B4) [16:04:28:795]: Creating MSIHANDLE (102) of type 790536 for thread 9652
MSI (s) (54:28) [16:04:28:795]: Invoking remote custom action. DLL: C:\Windows\Installer\MSI394D.tmp, Entrypoint: FirstTimeRunCA
MSI (s) (54!0C) [16:04:28:795]: Creating MSIHANDLE (103) of type 790531 for thread 2316
FirstTimeRun: Entering FirstTimeRun in C:\Windows\Installer\MSI394D.tmp, version 0.0.0.0
MSI (s) (54!0C) [16:04:28:795]: Closing MSIHANDLE (103) of type 790531 for thread 2316
MSI (s) (54!0C) [16:04:28:795]: Creating MSIHANDLE (104) of type 790531 for thread 2316
FirstTimeRun: Debug:found 2 properties.
MSI (s) (54!0C) [16:04:28:795]: Closing MSIHANDLE (104) of type 790531 for thread 2316
MSI (s) (54!0C) [16:04:28:795]: Creating MSIHANDLE (105) of type 790531 for thread 2316
FirstTimeRun: Warning: Invalid property ignored: FailCA=.
MSI (s) (54!0C) [16:04:28:795]: Closing MSIHANDLE (105) of type 790531 for thread 2316
MSI (s) (54!0C) [16:04:28:795]: Creating MSIHANDLE (106) of type 790531 for thread 2316
FirstTimeRun: Info: Properties: splunkHome: C:\Program Files\SplunkUniversalForwarder.
MSI (s) (54!0C) [16:04:28:795]: Closing MSIHANDLE (106) of type 790531 for thread 2316
MSI (s) (54!0C) [16:04:28:795]: Creating MSIHANDLE (107) of type 790531 for thread 2316
FirstTimeRun: Info: Execute first time run.
MSI (s) (54!0C) [16:04:28:811]: Closing MSIHANDLE (107) of type 790531 for thread 2316
MSI (s) (54!0C) [16:04:28:811]: Creating MSIHANDLE (108) of type 790531 for thread 2316
FirstTimeRun: Info: Enter. Args: "C:\Program Files\SplunkUniversalForwarder\bin\splunk.exe", _internal first-time-run --answer-yes --no-prompt
MSI (s) (54!0C) [16:04:28:811]: Closing MSIHANDLE (108) of type 790531 for thread 2316
MSI (s) (54!0C) [16:04:28:811]: Creating MSIHANDLE (109) of type 790531 for thread 2316
FirstTimeRun: Info: Temp variable: C:\Users\jjb01\AppData\Local\Temp
MSI (s) (54!0C) [16:04:28:811]: Closing MSIHANDLE (109) of type 790531 for thread 2316
MSI (s) (54!0C) [16:04:28:811]: Creating MSIHANDLE (110) of type 790531 for thread 2316
FirstTimeRun: Info: Execute string: cmd.exe /c ""C:\Program Files\SplunkUniversalForwarder\bin\splunk.exe" _internal first-time-run --answer-yes --no-prompt >> "C:\Users\jjb01\AppData\Local\Temp\splunk.log" 2>&1"
MSI (s) (54!0C) [16:04:28:811]: Closing MSIHANDLE (110) of type 790531 for thread 2316
MSI (s) (54!0C) [16:04:28:873]: Creating MSIHANDLE (111) of type 790531 for thread 2316
FirstTimeRun: Info: WaitForSingleObject returned : 0x0
MSI (s) (54!0C) [16:04:28:873]: Closing MSIHANDLE (111) of type 790531 for thread 2316
MSI (s) (54!0C) [16:04:28:873]: Creating MSIHANDLE (112) of type 790531 for thread 2316
FirstTimeRun: Info: Exit code for process : 0x1
MSI (s) (54!0C) [16:04:28:873]: Closing MSIHANDLE (112) of type 790531 for thread 2316
MSI (s) (54!0C) [16:04:28:873]: Creating MSIHANDLE (113) of type 790531 for thread 2316
FirstTimeRun: Info: Leave.
MSI (s) (54!0C) [16:04:28:873]: Closing MSIHANDLE (113) of type 790531 for thread 2316
MSI (s) (54!0C) [16:04:28:873]: Creating MSIHANDLE (114) of type 790531 for thread 2316
FirstTimeRun: Error: ExecCmd failed: 0x1.
MSI (s) (54!0C) [16:04:28:873]: Closing MSIHANDLE (114) of type 790531 for thread 2316
MSI (s) (54!0C) [16:04:28:873]: Creating MSIHANDLE (115) of type 790531 for thread 2316
FirstTimeRun: Error 0x80004005: Cannot execute first time run.
MSI (s) (54!0C) [16:04:28:873]: Closing MSIHANDLE (115) of type 790531 for thread 2316
CustomAction FirstTimeRun returned actual error code 1603 (note this may not be 100% accurate if translation happened inside sandbox)
MSI (s) (54:28) [16:04:28:873]: Closing MSIHANDLE (102) of type 790536 for thread 9652
Action ended 16:04:28: InstallFinalize. Return value 3.
MSI (s) (54:B4) [16:04:28:889]: Note: 1: 2265 2: 3: -2147287035
MSI (s) (54:B4) [16:04:28:889]: User policy value 'DisableRollback' is 0
MSI (s) (54:B4) [16:04:28:889]: Machine policy value 'DisableRollback' is 0
MSI (s) (54:B4) [16:04:28:889]: Executing op: Header(Signature=1397708873,Version=500,Timestamp=1184268430,LangId=1033,Platform=589824,ScriptType=2,ScriptMajorVersion=21,ScriptMinorVersion=4,ScriptAttributes=1)
MSI (s) (54:B4) [16:04:28:889]: Executing op: DialogInfo(Type=0,Argument=1033)
MSI (s) (54:B4) [16:04:28:889]: Executing op: DialogInfo(Type=1,Argument=UniversalForwarder)
MSI (s) (54:B4) [16:04:28:889]: Executing op: RollbackInfo(,RollbackAction=Rollback,RollbackDescription=Rolling back action:,RollbackTemplate=[1],CleanupAction=RollbackCleanup,CleanupDescription=Removing backup files,CleanupTemplate=File: [1])
Action 16:04:28: Rollback. Rolling back action:
Rollback: FirstTimeRun
MSI (s) (54:B4) [16:04:28:889]: Executing op: ActionStart(Name=FirstTimeRun,,)
MSI (s) (54:B4) [16:04:28:889]: Executing op: ProductInfo(ProductKey={D77B0D44-D35B-4BD3-A54E-89CBAE2086E6},ProductName=UniversalForwarder,PackageName=splunkforwarder-6.2.2-255606-x64-release.msi,Language=1033,Version=100794370,Assignment=1,ObsoleteArg=0,ProductIcon=WixSplunkIcon,,PackageCode={1586EC18-33AD-4646-B29D-F56E77D62B32},,,InstanceType=0,LUASetting=0,RemoteURTInstalls=0,ProductDeploymentFlags=2)
Rollback: CreateFtr
MSI (s) (54:B4) [16:04:28:889]: Executing op: ActionStart(Name=CreateFtr,,)
Rollback: InstallNohandleDrv
MSI (s) (54:B4) [16:04:28:889]: Executing op: ActionStart(Name=InstallNohandleDrv,,)
Rollback: RollbackNohandleDrv
MSI (s) (54:B4) [16:04:28:889]: Executing op: ActionStart(Name=RollbackNohandleDrv,,)
MSI (s) (54:B4) [16:04:28:889]: Executing op: CustomActionRollback(Action=RollbackNohandleDrv,ActionType=3329,Source=BinaryData,Target=UninstallNohandleDrvCA,CustomActionData=SplunkHome=C:\Program Files\SplunkUniversalForwarder\;FailCA=)
MSI (s) (54:B4) [16:04:28:905]: Creating MSIHANDLE (116) of type 790536 for thread 9652
MSI (s) (54:F8) [16:04:28:905]: Invoking remote custom action. DLL: C:\Windows\Installer\MSI39AB.tmp, Entrypoint: UninstallNohandleDrvCA
MSI (s) (54!A4) [16:04:28:905]: Creating MSIHANDLE (117) of type 790531 for thread 10148
UninstallNohandleDrv: Entering UninstallNohandleDrv in C:\Windows\Installer\MSI39AB.tmp, version 0.0.0.0
MSI (s) (54!A4) [16:04:28:905]: Closing MSIHANDLE (117) of type 790531 for thread 10148
MSI (s) (54!A4) [16:04:28:905]: Creating MSIHANDLE (118) of type 790531 for thread 10148
UninstallNohandleDrv: Debug:found 2 properties.
MSI (s) (54!A4) [16:04:28:905]: Closing MSIHANDLE (118) of type 790531 for thread 10148
MSI (s) (54!A4) [16:04:28:905]: Creating MSIHANDLE (119) of type 790531 for thread 10148
UninstallNohandleDrv: Warning: Invalid property ignored: FailCA=.
MSI (s) (54!A4) [16:04:28:905]: Closing MSIHANDLE (119) of type 790531 for thread 10148
MSI (s) (54!A4) [16:04:28:905]: Creating MSIHANDLE (120) of type 790531 for thread 10148
UninstallNohandleDrv: Info: Driver inf file: C:\Program Files\SplunkUniversalForwarder\bin\SplunkMonitorNoHandleDrv-vista.inf.
MSI (s) (54!A4) [16:04:28:905]: Closing MSIHANDLE (120) of type 790531 for thread 10148
MSI (s) (54!A4) [16:04:28:905]: Creating MSIHANDLE (121) of type 790531 for thread 10148
UninstallNohandleDrv: Info: Enter.
MSI (s) (54!A4) [16:04:28:905]: Closing MSIHANDLE (121) of type 790531 for thread 10148
MSI (s) (54!A4) [16:04:28:905]: Creating MSIHANDLE (122) of type 790531 for thread 10148
UninstallNohandleDrv: Info: service SplunkMonitorNoHandle already exists
MSI (s) (54!A4) [16:04:28:905]: Closing MSIHANDLE (122) of type 790531 for thread 10148
MSI (s) (54!A4) [16:04:28:905]: Creating MSIHANDLE (123) of type 790531 for thread 10148
UninstallNohandleDrv: Info: Leave.
MSI (s) (54!A4) [16:04:28:905]: Closing MSIHANDLE (123) of type 790531 for thread 10148
MSI (s) (54!A4) [16:04:28:905]: Creating MSIHANDLE (124) of type 790531 for thread 10148
UninstallNohandleDrv: Info: Service: SplunkMonitorNoHandle, state: 2.
MSI (s) (54!A4) [16:04:28:905]: Closing MSIHANDLE (124) of type 790531 for thread 10148
MSI (s) (54:F8) [16:04:28:936]: Closing MSIHANDLE (116) of type 790536 for thread 9652
Rollback: InstallNetmonDrv
MSI (s) (54:B4) [16:04:28:936]: Executing op: ActionStart(Name=InstallNetmonDrv,,)
Rollback: RollbackNetmonDrv
MSI (s) (54:B4) [16:04:28:936]: Executing op: ActionStart(Name=RollbackNetmonDrv,,)
MSI (s) (54:B4) [16:04:28:936]: Executing op: CustomActionRollback(Action=RollbackNetmonDrv,ActionType=3329,Source=BinaryData,Target=UninstallNetmonDrvCA,CustomActionData=SplunkHome=C:\Program Files\SplunkUniversalForwarder\;FailCA=)
MSI (s) (54:B4) [16:04:28:952]: Creating MSIHANDLE (125) of type 790536 for thread 9652
MSI (s) (54:78) [16:04:28:952]: Invoking remote custom action. DLL: C:\Windows\Installer\MSI39DB.tmp, Entrypoint: UninstallNetmonDrvCA
MSI (s) (54!9C) [16:04:28:952]: Creating MSIHANDLE (126) of type 790531 for thread 3228
UninstallNetmonDrv: Entering UninstallNetmonDrv in C:\Windows\Installer\MSI39DB.tmp, version 0.0.0.0
MSI (s) (54!9C) [16:04:28:952]: Closing MSIHANDLE (126) of type 790531 for thread 3228
MSI (s) (54!9C) [16:04:28:952]: Creating MSIHANDLE (127) of type 790531 for thread 3228
UninstallNetmonDrv: Debug:found 2 properties.
MSI (s) (54!9C) [16:04:28:952]: Closing MSIHANDLE (127) of type 790531 for thread 3228
MSI (s) (54!9C) [16:04:28:952]: Creating MSIHANDLE (128) of type 790531 for thread 3228
UninstallNetmonDrv: Warning: Invalid property ignored: FailCA=.
MSI (s) (54!9C) [16:04:28:952]: Closing MSIHANDLE (128) of type 790531 for thread 3228
MSI (s) (54!9C) [16:04:28:952]: Creating MSIHANDLE (129) of type 790531 for thread 3228
UninstallNetmonDrv: Info: Driver inf file: C:\Program Files\SplunkUniversalForwarder\bin\splknetdrv-vista.inf.
MSI (s) (54!9C) [16:04:28:952]: Closing MSIHANDLE (129) of type 790531 for thread 3228
MSI (s) (54!9C) [16:04:28:952]: Creating MSIHANDLE (130) of type 790531 for thread 3228
UninstallNetmonDrv: Info: Enter.
MSI (s) (54!9C) [16:04:28:952]: Closing MSIHANDLE (130) of type 790531 for thread 3228
MSI (s) (54!9C) [16:04:28:952]: Creating MSIHANDLE (131) of type 790531 for thread 3228
UninstallNetmonDrv: Info: service splknetdrv already exists
MSI (s) (54!9C) [16:04:28:952]: Closing MSIHANDLE (131) of type 790531 for thread 3228
MSI (s) (54!9C) [16:04:28:952]: Creating MSIHANDLE (132) of type 790531 for thread 3228
UninstallNetmonDrv: Info: Leave.
MSI (s) (54!9C) [16:04:28:952]: Closing MSIHANDLE (132) of type 790531 for thread 3228
MSI (s) (54!9C) [16:04:28:952]: Creating MSIHANDLE (133) of type 790531 for thread 3228
UninstallNetmonDrv: Info: Service: splknetdrv, state: 2.
MSI (s) (54!9C) [16:04:28:952]: Closing MSIHANDLE (133) of type 790531 for thread 3228
MSI (s) (54:78) [16:04:28:983]: Closing MSIHANDLE (125) of type 790536 for thread 9652
Rollback: InstallRegmonDrv
MSI (s) (54:B4) [16:04:28:983]: Executing op: ActionStart(Name=InstallRegmonDrv,,)
Rollback: RollbackRegmonDrv
MSI (s) (54:B4) [16:04:28:983]: Executing op: ActionStart(Name=RollbackRegmonDrv,,)
MSI (s) (54:B4) [16:04:28:983]: Executing op: CustomActionRollback(Action=RollbackRegmonDrv,ActionType=3329,Source=BinaryData,Target=UninstallRegmonDrvCA,CustomActionData=SplunkHome=C:\Program Files\SplunkUniversalForwarder\;FailCA=)
MSI (s) (54:B4) [16:04:28:983]: Creating MSIHANDLE (134) of type 790536 for thread 9652
MSI (s) (54:40) [16:04:28:983]: Invoking remote custom action. DLL: C:\Windows\Installer\MSI3A0B.tmp, Entrypoint: UninstallRegmonDrvCA
MSI (s) (54!58) [16:04:28:998]: Creating MSIHANDLE (135) of type 790531 for thread 9816
UninstallRegmonDrv: Entering UninstallRegmonDrv in C:\Windows\Installer\MSI3A0B.tmp, version 0.0.0.0
MSI (s) (54!58) [16:04:28:998]: Closing MSIHANDLE (135) of type 790531 for thread 9816
MSI (s) (54!58) [16:04:28:998]: Creating MSIHANDLE (136) of type 790531 for thread 9816
UninstallRegmonDrv: Debug:found 2 properties.
MSI (s) (54!58) [16:04:28:998]: Closing MSIHANDLE (136) of type 790531 for thread 9816
MSI (s) (54!58) [16:04:28:998]: Creating MSIHANDLE (137) of type 790531 for thread 9816
UninstallRegmonDrv: Warning: Invalid property ignored: FailCA=.
MSI (s) (54!58) [16:04:28:998]: Closing MSIHANDLE (137) of type 790531 for thread 9816
MSI (s) (54!58) [16:04:28:998]: Creating MSIHANDLE (138) of type 790531 for thread 9816
UninstallRegmonDrv: Info: Driver inf file: C:\Program Files\SplunkUniversalForwarder\bin\splunkdrv-win6.inf.
MSI (s) (54!58) [16:04:28:998]: Closing MSIHANDLE (138) of type 790531 for thread 9816
MSI (s) (54!58) [16:04:28:998]: Creating MSIHANDLE (139) of type 790531 for thread 9816
UninstallRegmonDrv: Info: Enter.
MSI (s) (54!58) [16:04:28:998]: Closing MSIHANDLE (139) of type 790531 for thread 9816
MSI (s) (54!58) [16:04:28:998]: Creating MSIHANDLE (140) of type 790531 for thread 9816
UninstallRegmonDrv: Info: service splunkdrv-win6 already exists
MSI (s) (54!58) [16:04:28:998]: Closing MSIHANDLE (140) of type 790531 for thread 9816
MSI (s) (54!58) [16:04:28:998]: Creating MSIHANDLE (141) of type 790531 for thread 9816
UninstallRegmonDrv: Info: Leave.
MSI (s) (54!58) [16:04:28:998]: Closing MSIHANDLE (141) of type 790531 for thread 9816
MSI (s) (54!58) [16:04:28:998]: Creating MSIHANDLE (142) of type 790531 for thread 9816
UninstallRegmonDrv: Info: Service: splunkdrv-win6, state: 2.
MSI (s) (54!58) [16:04:28:998]: Closing MSIHANDLE (142) of type 790531 for thread 9816
MSI (s) (54:40) [16:04:29:030]: Closing MSIHANDLE (134) of type 790536 for thread 9652
Rollback: Copying new files
MSI (s) (54:B4) [16:04:29:030]: Executing op: ActionStart(Name=InstallFiles,Description=Copying new files,Template=File: [1], Directory: [9], Size: [6])
MSI (s) (54:B4) [16:04:29:030]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\etc\apps\SplunkUniversalForwarder\default\)
MSI (s) (54:B4) [16:04:29:030]: Executing op: FileRemove(,FileName=C:\Program Files\SplunkUniversalForwarder\etc\apps\SplunkUniversalForwarder\default\web.conf,,)
MSI (s) (54:B4) [16:04:29:030]: Note: 1: 2318 2:
MSI (s) (54:B4) [16:04:29:030]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\etc\system\bin\)
MSI (s) (54:B4) [16:04:29:030]: Executing op: FileRemove(,FileName=C:\Program Files\SplunkUniversalForwarder\etc\system\bin\WinNetMon.cmd,,)
MSI (s) (54:B4) [16:04:29:030]: Note: 1: 2318 2:
MSI (s) (54:B4) [16:04:29:030]: Executing op: FileRemove(,FileName=C:\Program Files\SplunkUniversalForwarder\etc\system\bin\admon.cmd,,)
MSI (s) (54:B4) [16:04:29:030]: Note: 1: 2318 2:
MSI (s) (54:B4) [16:04:29:030]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\bin\scripts\)
MSI (s) (54:B4) [16:04:29:030]: Executing op: FileRemove(,FileName=C:\Program Files\SplunkUniversalForwarder\bin\scripts\readme.txt,,)
MSI (s) (54:B4) [16:04:29:030]: Note: 1: 2318 2:
MSI (s) (54:B4) [16:04:29:030]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\etc\system\README\)
MSI (s) (54:B4) [16:04:29:045]: Executing op: FileRemove(,FileName=C:\Program Files\SplunkUniversalForwarder\etc\system\README\authorize.conf.spec,,)
MSI (s) (54:B4) [16:04:29:045]: Note: 1: 2318 2:
MSI (s) (54:B4) [16:04:29:045]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\bin\)
MSI (s) (54:B4) [16:04:29:045]: Executing op: FileRemove(,FileName=C:\Program Files\SplunkUniversalForwarder\bin\splunk-regmon.exe,,)
MSI (s) (54:B4) [16:04:29:045]: Note: 1: 2318 2:
MSI (s) (54:B4) [16:04:29:045]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\etc\system\README\)
MSI (s) (54:B4) [16:04:29:045]: Executing op: FileRemove(,FileName=C:\Program Files\SplunkUniversalForwarder\etc\system\README\sourcetypes.conf.example,,)
MSI (s) (54:B4) [16:04:29:045]: Note: 1: 2318 2:
MSI (s) (54:B4) [16:04:29:045]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\bin\)
MSI (s) (54:B4) [16:04:29:045]: Executing op: FileRemove(,FileName=C:\Program Files\SplunkUniversalForwarder\bin\splknetdrv-win7.inf,,)
MSI (s) (54:B4) [16:04:29:045]: Note: 1: 2318 2:
MSI (s) (54:B4) [16:04:29:045]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\etc\apps\introspection_generator_addon\default\)
MSI (s) (54:B4) [16:04:29:045]: Executing op: FileRemove(,FileName=C:\Program Files\SplunkUniversalForwarder\etc\apps\introspection_generator_addon\default\inputs.conf,,)
MSI (s) (54:B4) [16:04:29:045]: Note: 1: 2318 2:
MSI (s) (54:B4) [16:04:29:045]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\etc\system\README\)
MSI (s) (54:B4) [16:04:29:045]: Executing op: FileRemove(,FileName=C:\Program Files\SplunkUniversalForwarder\etc\system\README\default-mode.conf.examples,,)
MSI (s) (54:B4) [16:04:29:045]: Note: 1: 2318 2:
MSI (s) (54:B4) [16:04:29:045]: Executing op: FileRemove(,FileName=C:\Program Files\SplunkUniversalForwarder\etc\system\README\collections.conf.spec,,)
MSI (s) (54:B4) [16:04:29:045]: Note: 1: 2318 2:
MSI (s) (54:B4) [16:04:29:045]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\bin\)
MSI (s) (54:B4) [16:04:29:045]: Executing op: FileRemove(,FileName=C:\Program Files\SplunkUniversalForwarder\bin\libxml2.dll,,)
MSI (s) (54:B4) [16:04:29:045]: Note: 1: 2318 2:
MSI (s) (54:B4) [16:04:29:045]: Executing op: FileRemove(,FileName=C:\Program Files\SplunkUniversalForwarder\bin\SplunkMonitorNoHandledrv-win8.cat,,)
MSI (s) (54:B4) [16:04:29:045]: Note: 1: 2318 2:
MSI (s) (54:B4) [16:04:29:045]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\etc\)
MSI (s) (54:B4) [16:04:29:045]: Executing op: FileRemove(,FileName=C:\Program Files\SplunkUniversalForwarder\etc\log-utility.cfg,,)
MSI (s) (54:B4) [16:04:29:061]: Note: 1: 2318 2:
MSI (s) (54:B4) [16:04:29:061]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\bin\scripts\)
MSI (s) (54:B4) [16:04:29:061]: Executing op: FileRemove(,FileName=C:\Program Files\SplunkUniversalForwarder\bin\scripts\splunk-admon.path,,)
MSI (s) (54:B4) [16:04:29:061]: Note: 1: 2318 2:
MSI (s) (54:B4) [16:04:29:061]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\etc\system\bin\)
MSI (s) (54:B4) [16:04:29:061]: Executing op: FileRemove(,FileName=C:\Program Files\SplunkUniversalForwarder\etc\system\bin\MonitorNoHandle.cmd,,)
MSI (s) (54:B4) [16:04:29:061]: Note: 1: 2318 2:
MSI (s) (54:B4) [16:04:29:061]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\etc\system\default\)
MSI (s) (54:B4) [16:04:29:061]: Executing op: FileRemove(,FileName=C:\Program Files\SplunkUniversalForwarder\etc\system\default\default-mode.conf,,)
MSI (s) (54:B4) [16:04:29:061]: Note: 1: 2318 2:
MSI (s) (54:B4) [16:04:29:061]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\bin\)
MSI (s) (54:B4) [16:04:29:061]: Executing op: FileRemove(,FileName=C:\Program Files\SplunkUniversalForwarder\bin\splunkdrv-win6.sys,,)
MSI (s) (54:B4) [16:04:29:061]: Note: 1: 2318 2:
MSI (s) (54:B4) [16:04:29:061]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\etc\system\README\)
MSI (s) (54:B4) [16:04:29:061]: Executing op: FileRemove(,FileName=C:\Program Files\SplunkUniversalForwarder\etc\system\README\default-mode.conf.spec,,)
MSI (s) (54:B4) [16:04:29:061]: Note: 1: 2318 2:
MSI (s) (54:B4) [16:04:29:061]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\bin\)
MSI (s) (54:B4) [16:04:29:061]: Executing op: FileRemove(,FileName=C:\Program Files\SplunkUniversalForwarder\bin\splknetdrv-win7.sys,,)
MSI (s) (54:B4) [16:04:29:061]: Note: 1: 2318 2:
MSI (s) (54:B4) [16:04:29:061]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\etc\)
MSI (s) (54:B4) [16:04:29:061]: Executing op: FileRemove(,FileName=C:\Program Files\SplunkUniversalForwarder\etc\splunk-launch.conf.default,,)
MSI (s) (54:B4) [16:04:29:061]: Note: 1: 2318 2:
MSI (s) (54:B4) [16:04:29:061]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\etc\system\bin\)
MSI (s) (54:B4) [16:04:29:061]: Executing op: FileRemove(,FileName=C:\Program Files\SplunkUniversalForwarder\etc\system\bin\WinHostMon.cmd,,)
MSI (s) (54:B4) [16:04:29:061]: Note: 1: 2318 2:
MSI (s) (54:B4) [16:04:29:061]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\etc\system\README\)
MSI (s) (54:B4) [16:04:29:061]: Executing op: FileRemove(,FileName=C:\Program Files\SplunkUniversalForwarder\etc\system\README\web.conf.example,,)
MSI (s) (54:B4) [16:04:29:061]: Note: 1: 2318 2:
MSI (s) (54:B4) [16:04:29:061]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\etc\modules\input\structuredparsing\)
MSI (s) (54:B4) [16:04:29:077]: Executing op: FileRemove(,FileName=C:\Program Files\SplunkUniversalForwarder\etc\modules\input\structuredparsing\config.xml,,)
MSI (s) (54:B4) [16:04:29:077]: Note: 1: 2318 2:
MSI (s) (54:B4) [16:04:29:077]: Note: 1: 2318 2:
MSI (s) (54:B4) [16:04:29:077]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\etc\apps\learned\metadata\)
MSI (s) (54:B4) [16:04:29:077]: Executing op: FileRemove(,FileName=C:\Program Files\SplunkUniversalForwarder\etc\apps\learned\metadata\default.meta,,)
MSI (s) (54:B4) [16:04:29:077]: Note: 1: 2318 2:
MSI (s) (54:B4) [16:04:29:077]: Note: 1: 2318 2:
MSI (s) (54:B4) [16:04:29:077]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\etc\system\default\)
MSI (s) (54:B4) [16:04:29:077]: Executing op: FileRemove(,FileName=C:\Program Files\SplunkUniversalForwarder\etc\system\default\restmap.conf,,)
MSI (s) (54:B4) [16:04:29:077]: Note: 1: 2318 2:
MSI (s) (54:B4) [16:04:29:077]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\etc\myinstall\)
MSI (s) (54:B4) [16:04:29:077]: Executing op: FileRemove(,FileName=C:\Program Files\SplunkUniversalForwarder\etc\myinstall\splunkd.xml.cfg-default,,)
MSI (s) (54:B4) [16:04:29:077]: Note: 1: 2318 2:
MSI (s) (54:B4) [16:04:29:077]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\bin\scripts\)
MSI (s) (54:B4) [16:04:29:077]: Executing op: FileRemove(,FileName=C:\Program Files\SplunkUniversalForwarder\bin\scripts\splunk-winprintmon.path,,)
MSI (s) (54:B4) [16:04:29:077]: Note: 1: 2318 2:
MSI (s) (54:B4) [16:04:29:077]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\etc\apps\introspection_generator_addon\default\)
MSI (s) (54:B4) [16:04:29:077]: Executing op: FileRemove(,FileName=C:\Program Files\SplunkUniversalForwarder\etc\apps\introspection_generator_addon\default\server.conf,,)
MSI (s) (54:B4) [16:04:29:077]: Note: 1: 2318 2:
MSI (s) (54:B4) [16:04:29:077]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\etc\system\README\)
MSI (s) (54:B4) [16:04:29:077]: Executing op: FileRemove(,FileName=C:\Program Files\SplunkUniversalForwarder\etc\system\README\conf_checker.rules,,)
MSI (s) (54:B4) [16:04:29:077]: Note: 1: 2318 2:
MSI (s) (54:B4) [16:04:29:077]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\etc\apps\SplunkUniversalForwarder\metadata\)
MSI (s) (54:B4) [16:04:29:077]: Executing op: FileRemove(,FileName=C:\Program Files\SplunkUniversalForwarder\etc\apps\SplunkUniversalForwarder\metadata\default.meta,,)
MSI (s) (54:B4) [16:04:29:077]: Note: 1: 2318 2:
MSI (s) (54:B4) [16:04:29:077]: Note: 1: 2318 2:
MSI (s) (54:B4) [16:04:29:077]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\bin\)
MSI (s) (54:B4) [16:04:29:077]: Executing op: FileRemove(,FileName=C:\Program Files\SplunkUniversalForwarder\bin\btprobe.exe,,)
MSI (s) (54:B4) [16:04:29:077]: Note: 1: 2318 2:
MSI (s) (54:B4) [16:04:29:092]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\etc\)
MSI (s) (54:B4) [16:04:29:092]: Executing op: FileRemove(,FileName=C:\Program Files\SplunkUniversalForwarder\etc\log-btool-debug.cfg,,)
MSI (s) (54:B4) [16:04:29:092]: Note: 1: 2318 2:
MSI (s) (54:B4) [16:04:29:092]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\etc\system\default\)
MSI (s) (54:B4) [16:04:29:092]: Executing op: FileRemove(,FileName=C:\Program Files\SplunkUniversalForwarder\etc\system\default\inputs.conf,,)
MSI (s) (54:B4) [16:04:29:092]: Note: 1: 2318 2:
MSI (s) (54:B4) [16:04:29:092]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\etc\apps\SplunkUniversalForwarder\default\)
MSI (s) (54:B4) [16:04:29:092]: Executing op: FileRemove(,FileName=C:\Program Files\SplunkUniversalForwarder\etc\apps\SplunkUniversalForwarder\default\app.conf,,)
MSI (s) (54:B4) [16:04:29:092]: Note: 1: 2318 2:
MSI (s) (54:B4) [16:04:29:092]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\etc\system\README\)
MSI (s) (54:B4) [16:04:29:092]: Executing op: FileRemove(,FileName=C:\Program Files\SplunkUniversalForwarder\etc\system\README\literals.conf.spec,,)
MSI (s) (54:B4) [16:04:29:092]: Note: 1: 2318 2:
MSI (s) (54:B4) [16:04:29:092]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\etc\modules\input\TCP\)
MSI (s) (54:B4) [16:04:29:092]: Executing op: FileRemove(,FileName=C:\Program Files\SplunkUniversalForwarder\etc\modules\input\TCP\config.xml,,)
MSI (s) (54:B4) [16:04:29:092]: Note: 1: 2318 2:
MSI (s) (54:B4) [16:04:29:092]: Note: 1: 2318 2:
MSI (s) (54:B4) [16:04:29:092]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\etc\system\default\)
MSI (s) (54:B4) [16:04:29:092]: Executing op: FileRemove(,FileName=C:\Program Files\SplunkUniversalForwarder\etc\system\default\server.conf,,)
MSI (s) (54:B4) [16:04:29:092]: Note: 1: 2318 2:
MSI (s) (54:B4) [16:04:29:092]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\etc\apps\introspection_generator_addon\default\)
MSI (s) (54:B4) [16:04:29:092]: Executing op: FileRemove(,FileName=C:\Program Files\SplunkUniversalForwarder\etc\apps\introspection_generator_addon\default\app.conf,,)
MSI (s) (54:B4) [16:04:29:092]: Note: 1: 2318 2:
MSI (s) (54:B4) [16:04:29:092]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\etc\system\README\)
MSI (s) (54:B4) [16:04:29:092]: Executing op: FileRemove(,FileName=C:\Program Files\SplunkUniversalForwarder\etc\system\README\server.conf.spec,,)
MSI (s) (54:B4) [16:04:29:092]: Note: 1: 2318 2:
MSI (s) (54:B4) [16:04:29:092]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\etc\apps\search\default\)
MSI (s) (54:B4) [16:04:29:092]: Executing op: FileRemove(,FileName=C:\Program Files\SplunkUniversalForwarder\etc\apps\search\default\restmap.conf,,)
MSI (s) (54:B4) [16:04:29:092]: Note: 1: 2318 2:
MSI (s) (54:B4) [16:04:29:092]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\share\splunk\3rdparty\)
MSI (s) (54:B4) [16:04:29:092]: Executing op: FileRemove(,FileName=C:\Program Files\SplunkUniversalForwarder\share\splunk\3rdparty\Copyright-for-libxml2-2.9.1.txt,,)
MSI (s) (54:B4) [16:04:29:108]: Note: 1: 2318 2:
MSI (s) (54:B4) [16:04:29:108]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\etc\apps\SplunkUniversalForwarder\default\)
MSI (s) (54:B4) [16:04:29:108]: Executing op: FileRemove(,FileName=C:\Program Files\SplunkUniversalForwarder\etc\apps\SplunkUniversalForwarder\default\props.conf,,)
MSI (s) (54:B4) [16:04:29:108]: Note: 1: 2318 2:
MSI (s) (54:B4) [16:04:29:108]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\etc\modules\input\winparsing\)
MSI (s) (54:B4) [16:04:29:108]: Executing op: FileRemove(,FileName=C:\Program Files\SplunkUniversalForwarder\etc\modules\input\winparsing\config.xml,,)
MSI (s) (54:B4) [16:04:29:108]: Note: 1: 2318 2:
MSI (s) (54:B4) [16:04:29:108]: Note: 1: 2318 2:
MSI (s) (54:B4) [16:04:29:108]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\etc\system\default\)
MSI (s) (54:B4) [16:04:29:108]: Executing op: FileRemove(,FileName=C:\Program Files\SplunkUniversalForwarder\etc\system\default\alert_actions.conf,,)
MSI (s) (54:B4) [16:04:29:108]: Note: 1: 2318 2:
MSI (s) (54:B4) [16:04:29:108]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\share\splunk\3rdparty\)
MSI (s) (54:B4) [16:04:29:108]: Executing op: FileRemove(,FileName=C:\Program Files\SplunkUniversalForwarder\share\splunk\3rdparty\Copyright-for-libxslt-1.1.28.txt,,)
MSI (s) (54:B4) [16:04:29:108]: Note: 1: 2318 2:
MSI (s) (54:B4) [16:04:29:108]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\)
MSI (s) (54:B4) [16:04:29:108]: Executing op: FileRemove(,FileName=C:\Program Files\SplunkUniversalForwarder\README-splunk.txt,,)
MSI (s) (54:B4) [16:04:29:108]: Note: 1: 2318 2:
MSI (s) (54:B4) [16:04:29:108]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\etc\apps\search\default\)
MSI (s) (54:B4) [16:04:29:108]: Executing op: FileRemove(,FileName=C:\Program Files\SplunkUniversalForwarder\etc\apps\search\default\inputs.conf,,)
MSI (s) (54:B4) [16:04:29:108]: Note: 1: 2318 2:
MSI (s) (54:B4) [16:04:29:108]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\bin\)
MSI (s) (54:B4) [16:04:29:108]: Executing op: FileRemove(,FileName=C:\Program Files\SplunkUniversalForwarder\bin\copyright.txt,,)
MSI (s) (54:B4) [16:04:29:108]: Note: 1: 2318 2:
MSI (s) (54:B4) [16:04:29:108]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\etc\system\README\)
MSI (s) (54:B4) [16:04:29:108]: Executing op: FileRemove(,FileName=C:\Program Files\SplunkUniversalForwarder\etc\system\README\props.conf.example,,)
MSI (s) (54:B4) [16:04:29:108]: Note: 1: 2318 2:
MSI (s) (54:B4) [16:04:29:108]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\bin\)
MSI (s) (54:B4) [16:04:29:108]: Executing op: FileRemove(,FileName=C:\Program Files\SplunkUniversalForwarder\bin\btool.exe,,)
MSI (s) (54:B4) [16:04:29:123]: Note: 1: 2318 2:
MSI (s) (54:B4) [16:04:29:123]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\etc\apps\SplunkUniversalForwarder\default\)
MSI (s) (54:B4) [16:04:29:123]: Executing op: FileRemove(,FileName=C:\Program Files\SplunkUniversalForwarder\etc\apps\SplunkUniversalForwarder\default\server.conf,,)
MSI (s) (54:B4) [16:04:29:123]: Note: 1: 2318 2:
MSI (s) (54:B4) [16:04:29:123]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\etc\disabled-apps\)
MSI (s) (54:B4) [16:04:29:123]: Executing op: FileRemove(,FileName=C:\Program Files\SplunkUniversalForwarder\etc\disabled-apps\README,,)
MSI (s) (54:B4) [16:04:29:123]: Note: 1: 2318 2:
MSI (s) (54:B4) [16:04:29:123]: Note: 1: 2318 2:
MSI (s) (54:B4) [16:04:29:123]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\share\splunk\3rdparty\)
MSI (s) (54:B4) [16:04:29:123]: Executing op: FileRemove(,FileName=C:\Program Files\SplunkUniversalForwarder\share\splunk\3rdparty\Copyright-for-pcre-8.33.txt,,)
MSI (s) (54:B4) [16:04:29:123]: Note: 1: 2318 2:
MSI (s) (54:B4) [16:04:29:123]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\etc\system\README\)
MSI (s) (54:B4) [16:04:29:123]: Executing op: FileRemove(,FileName=C:\Program Files\SplunkUniversalForwarder\etc\system\README\user-prefs.conf.spec,,)
MSI (s) (54:B4) [16:04:29:123]: Note: 1: 2318 2:
MSI (s) (54:B4) [16:04:29:123]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\etc\apps\SplunkUniversalForwarder\default\)
MSI (s) (54:B4) [16:04:29:123]: Executing op: FileRemove(,FileName=C:\Program Files\SplunkUniversalForwarder\etc\apps\SplunkUniversalForwarder\default\default-mode.conf,,)
MSI (s) (54:B4) [16:04:29:123]: Note: 1: 2318 2:
MSI (s) (54:B4) [16:04:29:123]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\etc\system\README\)
MSI (s) (54:B4) [16:04:29:123]: Executing op: FileRemove(,FileName=C:\Program Files\SplunkUniversalForwarder\etc\system\README\collections.conf.example,,)
MSI (s) (54:B4) [16:04:29:123]: Note: 1: 2318 2:
MSI (s) (54:B4) [16:04:29:123]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\etc\system\local\)
MSI (s) (54:B4) [16:04:29:123]: Executing op: FileRemove(,FileName=C:\Program Files\SplunkUniversalForwarder\etc\system\local\README,,)
MSI (s) (54:B4) [16:04:29:123]: Note: 1: 2318 2:
MSI (s) (54:B4) [16:04:29:123]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\bin\)
MSI (s) (54:B4) [16:04:29:123]: Executing op: FileRemove(,FileName=C:\Program Files\SplunkUniversalForwarder\bin\msvcr110.dll,,)
MSI (s) (54:B4) [16:04:29:123]: Note: 1: 2318 2:
MSI (s) (54:B4) [16:04:29:123]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\etc\apps\search\lookups\)
MSI (s) (54:B4) [16:04:29:123]: Executing op: FileRemove(,FileName=C:\Program Files\SplunkUniversalForwarder\etc\apps\search\lookups\README,,)
MSI (s) (54:B4) [16:04:29:123]: Note: 1: 2318 2:
MSI (s) (54:B4) [16:04:29:123]: Note: 1: 2318 2:
MSI (s) (54:B4) [16:04:29:139]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\etc\shcluster\users\)
MSI (s) (54:B4) [16:04:29:139]: Executing op: FileRemove(,FileName=C:\Program Files\SplunkUniversalForwarder\etc\shcluster\users\README,,)
MSI (s) (54:B4) [16:04:29:139]: Note: 1: 2318 2:
MSI (s) (54:B4) [16:04:29:139]: Note: 1: 2318 2:
MSI (s) (54:B4) [16:04:29:139]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\etc\system\static\)
MSI (s) (54:B4) [16:04:29:139]: Executing op: FileRemove(,FileName=C:\Program Files\SplunkUniversalForwarder\etc\system\static\splunkrc_cmds.xml,,)
MSI (s) (54:B4) [16:04:29:139]: Note: 1: 2318 2:
MSI (s) (54:B4) [16:04:29:139]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\bin\)
MSI (s) (54:B4) [16:04:29:139]: Executing op: FileRemove(,FileName=C:\Program Files\SplunkUniversalForwarder\bin\splknetdrv-win8.cat,,)
MSI (s) (54:B4) [16:04:29:139]: Note: 1: 2318 2:
MSI (s) (54:B4) [16:04:29:139]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\etc\shcluster\apps\)
MSI (s) (54:B4) [16:04:29:139]: Executing op: FileRemove(,FileName=C:\Program Files\SplunkUniversalForwarder\etc\shcluster\apps\README,,)
MSI (s) (54:B4) [16:04:29:139]: Note: 1: 2318 2:
MSI (s) (54:B4) [16:04:29:139]: Note: 1: 2318 2:
MSI (s) (54:B4) [16:04:29:139]: Note: 1: 2318 2:
MSI (s) (54:B4) [16:04:29:139]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\etc\apps\SplunkUniversalForwarder\default\)
MSI (s) (54:B4) [16:04:29:139]: Executing op: FileRemove(,FileName=C:\Program Files\SplunkUniversalForwarder\etc\apps\SplunkUniversalForwarder\default\README,,)
MSI (s) (54:B4) [16:04:29:139]: Note: 1: 2318 2:
MSI (s) (54:B4) [16:04:29:139]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\bin\)
MSI (s) (54:B4) [16:04:29:139]: Executing op: FileRemove(,FileName=C:\Program Files\SplunkUniversalForwarder\bin\SplunkMonitorNoHandledrv-win8.sys,,)
MSI (s) (54:B4) [16:04:29:139]: Note: 1: 2318 2:
MSI (s) (54:B4) [16:04:29:139]: Executing op: FileRemove(,FileName=C:\Program Files\SplunkUniversalForwarder\bin\splknetdrv-vista.inf,,)
MSI (s) (54:B4) [16:04:29:139]: Note: 1: 2318 2:
MSI (s) (54:B4) [16:04:29:139]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\etc\system\bin\)
MSI (s) (54:B4) [16:04:29:139]: Executing op: FileRemove(,FileName=C:\Program Files\SplunkUniversalForwarder\etc\system\bin\perfmon.cmd,,)
MSI (s) (54:B4) [16:04:29:139]: Note: 1: 2318 2:
MSI (s) (54:B4) [16:04:29:139]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\etc\system\README\)
MSI (s) (54:B4) [16:04:29:139]: Executing op: FileRemove(,FileName=C:\Program Files\SplunkUniversalForwarder\etc\system\README\props.conf.spec,,)
MSI (s) (54:B4) [16:04:29:139]: Note: 1: 2318 2:
MSI (s) (54:B4) [16:04:29:155]: Executing op: FileRemove(,FileName=C:\Program Files\SplunkUniversalForwarder\etc\system\README\source-classifier.conf.example,,)
MSI (s) (54:B4) [16:04:29:155]: Note: 1: 2318 2:
MSI (s) (54:B4) [16:04:29:155]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\bin\)
MSI (s) (54:B4) [16:04:29:155]: Executing op: FileRemove(,FileName=C:\Program Files\SplunkUniversalForwarder\bin\SplunkMonitorNoHandledrv-vista.inf,,)
MSI (s) (54:B4) [16:04:29:155]: Note: 1: 2318 2:
MSI (s) (54:B4) [16:04:29:155]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\etc\system\README\)
MSI (s) (54:B4) [16:04:29:155]: Executing op: FileRemove(,FileName=C:\Program Files\SplunkUniversalForwarder\etc\system\README\inputs.conf.example,,)
MSI (s) (54:B4) [16:04:29:155]: Note: 1: 2318 2:
MSI (s) (54:B4) [16:04:29:155]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\etc\system\default\)
MSI (s) (54:B4) [16:04:29:155]: Executing op: FileRemove(,FileName=C:\Program Files\SplunkUniversalForwarder\etc\system\default\audit.conf,,)
MSI (s) (54:B4) [16:04:29:155]: Note: 1: 2318 2:
MSI (s) (54:B4) [16:04:29:155]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\etc\system\README\)
MSI (s) (54:B4) [16:04:29:155]: Executing op: FileRemove(,FileName=C:\Program Files\SplunkUniversalForwarder\etc\system\README\restmap.conf.example,,)
MSI (s) (54:B4) [16:04:29:155]: Note: 1: 2318 2:
MSI (s) (54:B4) [16:04:29:155]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\etc\system\default\)
MSI (s) (54:B4) [16:04:29:155]: Executing op: FileRemove(,FileName=C:\Program Files\SplunkUniversalForwarder\etc\system\default\authorize.conf,,)
MSI (s) (54:B4) [16:04:29:155]: Note: 1: 2318 2:
MSI (s) (54:B4) [16:04:29:155]: Executing op: FileRemove(,FileName=C:\Program Files\SplunkUniversalForwarder\etc\system\default\procmon-filters.conf,,)
MSI (s) (54:B4) [16:04:29:155]: Note: 1: 2318 2:
MSI (s) (54:B4) [16:04:29:155]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\etc\deployment-apps\)
MSI (s) (54:B4) [16:04:29:155]: Executing op: FileRemove(,FileName=C:\Program Files\SplunkUniversalForwarder\etc\deployment-apps\README,,)
MSI (s) (54:B4) [16:04:29:155]: Note: 1: 2318 2:
MSI (s) (54:B4) [16:04:29:155]: Note: 1: 2318 2:
MSI (s) (54:B4) [16:04:29:155]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\bin\)
MSI (s) (54:B4) [16:04:29:155]: Executing op: FileRemove(,FileName=C:\Program Files\SplunkUniversalForwarder\bin\splunkdrv-win6.cat,,)
MSI (s) (54:B4) [16:04:29:155]: Note: 1: 2318 2:
MSI (s) (54:B4) [16:04:29:155]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\etc\system\metadata\)
MSI (s) (54:B4) [16:04:29:155]: Executing op: FileRemove(,FileName=C:\Program Files\SplunkUniversalForwarder\etc\system\metadata\default.meta,,)
MSI (s) (54:B4) [16:04:29:155]: Note: 1: 2318 2:
MSI (s) (54:B4) [16:04:29:155]: Note: 1: 2318 2:
MSI (s) (54:B4) [16:04:29:170]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\etc\system\default\)
MSI (s) (54:B4) [16:04:29:170]: Executing op: FileRemove(,FileName=C:\Program Files\SplunkUniversalForwarder\etc\system\default\sourcetypes.conf,,)
MSI (s) (54:B4) [16:04:29:170]: Note: 1: 2318 2:
MSI (s) (54:B4) [16:04:29:170]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\)
MSI (s) (54:B4) [16:04:29:170]: Executing op: FileRemove(,FileName=C:\Program Files\SplunkUniversalForwarder\copyright.txt,,)
MSI (s) (54:B4) [16:04:29:170]: Note: 1: 2318 2:
MSI (s) (54:B4) [16:04:29:170]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\share\splunk\3rdparty\)
MSI (s) (54:B4) [16:04:29:170]: Executing op: FileRemove(,FileName=C:\Program Files\SplunkUniversalForwarder\share\splunk\3rdparty\Copyright-for-openssl-1.0.1k.txt,,)
MSI (s) (54:B4) [16:04:29:170]: Note: 1: 2318 2:
MSI (s) (54:B4) [16:04:29:170]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\etc\system\README\)
MSI (s) (54:B4) [16:04:29:170]: Executing op: FileRemove(,FileName=C:\Program Files\SplunkUniversalForwarder\etc\system\README\wmi.conf.example,,)
MSI (s) (54:B4) [16:04:29:170]: Note: 1: 2318 2:
MSI (s) (54:B4) [16:04:29:170]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\bin\scripts\)
MSI (s) (54:B4) [16:04:29:170]: Executing op: FileRemove(,FileName=C:\Program Files\SplunkUniversalForwarder\bin\scripts\splunk-winhostmon.path,,)
MSI (s) (54:B4) [16:04:29:170]: Note: 1: 2318 2:
MSI (s) (54:B4) [16:04:29:170]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\etc\system\README\)
MSI (s) (54:B4) [16:04:29:170]: Executing op: FileRemove(,FileName=C:\Program Files\SplunkUniversalForwarder\etc\system\README\user-prefs.conf.example,,)
MSI (s) (54:B4) [16:04:29:170]: Note: 1: 2318 2:
MSI (s) (54:B4) [16:04:29:170]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\bin\)
MSI (s) (54:B4) [16:04:29:170]: Executing op: FileRemove(,FileName=C:\Program Files\SplunkUniversalForwarder\bin\splknetdrv-win8.inf,,)
MSI (s) (54:B4) [16:04:29:170]: Note: 1: 2318 2:
MSI (s) (54:B4) [16:04:29:170]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\etc\apps\search\default\)
MSI (s) (54:B4) [16:04:29:170]: Executing op: FileRemove(,FileName=C:\Program Files\SplunkUniversalForwarder\etc\apps\search\default\props.conf,,)
MSI (s) (54:B4) [16:04:29:170]: Note: 1: 2318 2:
MSI (s) (54:B4) [16:04:29:170]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\)
MSI (s) (54:B4) [16:04:29:170]: Executing op: FileRemove(,FileName=C:\Program Files\SplunkUniversalForwarder\license-eula.rtf,,)
MSI (s) (54:B4) [16:04:29:170]: Note: 1: 2318 2:
MSI (s) (54:B4) [16:04:29:170]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\bin\)
MSI (s) (54:B4) [16:04:29:170]: Executing op: FileRemove(,FileName=C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe,,)
MSI (s) (54:B4) [16:04:29:186]: Note: 1: 2318 2:
MSI (s) (54:B4) [16:04:29:186]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\)
MSI (s) (54:B4) [16:04:29:186]: Executing op: FileRemove(,FileName=C:\Program Files\SplunkUniversalForwarder\license-eula.txt,,)
MSI (s) (54:B4) [16:04:29:186]: Note: 1: 2318 2:
MSI (s) (54:B4) [16:04:29:186]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\etc\system\README\)
MSI (s) (54:B4) [16:04:29:186]: Executing op: FileRemove(,FileName=C:\Program Files\SplunkUniversalForwarder\etc\system\README\default.meta.spec,,)
MSI (s) (54:B4) [16:04:29:186]: Note: 1: 2318 2:
MSI (s) (54:B4) [16:04:29:186]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\etc\apps\SplunkUniversalForwarder\default\)
MSI (s) (54:B4) [16:04:29:186]: Executing op: FileRemove(,FileName=C:\Program Files\SplunkUniversalForwarder\etc\apps\SplunkUniversalForwarder\default\inputs.conf,,)
MSI (s) (54:B4) [16:04:29:186]: Note: 1: 2318 2:
MSI (s) (54:B4) [16:04:29:186]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\etc\system\README\)
MSI (s) (54:B4) [16:04:29:186]: Executing op: FileRemove(,FileName=C:\Program Files\SplunkUniversalForwarder\etc\system\README\server.conf.example,,)
MSI (s) (54:B4) [16:04:29:186]: Note: 1: 2318 2:
MSI (s) (54:B4) [16:04:29:186]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\etc\system\default\)
MSI (s) (54:B4) [16:04:29:186]: Executing op: FileRemove(,FileName=C:\Program Files\SplunkUniversalForwarder\etc\system\default\limits.conf,,)
MSI (s) (54:B4) [16:04:29:186]: Note: 1: 2318 2:
MSI (s) (54:B4) [16:04:29:186]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\etc\modules\input\fschangemanager\)
MSI (s) (54:B4) [16:04:29:186]: Executing op: FileRemove(,FileName=C:\Program Files\SplunkUniversalForwarder\etc\modules\input\fschangemanager\config.xml,,)
MSI (s) (54:B4) [16:04:29:186]: Note: 1: 2318 2:
MSI (s) (54:B4) [16:04:29:186]: Note: 1: 2318 2:
MSI (s) (54:B4) [16:04:29:186]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\)
MSI (s) (54:B4) [16:04:29:186]: Executing op: FileRemove(,FileName=C:\Program Files\SplunkUniversalForwarder\ftr,,)
MSI (s) (54:B4) [16:04:29:186]: Note: 1: 2318 2:
MSI (s) (54:B4) [16:04:29:186]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\bin\scripts\)
MSI (s) (54:B4) [16:04:29:186]: Executing op: FileRemove(,FileName=C:\Program Files\SplunkUniversalForwarder\bin\scripts\splunk-regmon.path,,)
MSI (s) (54:B4) [16:04:29:186]: Note: 1: 2318 2:
MSI (s) (54:B4) [16:04:29:186]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\etc\system\default\)
MSI (s) (54:B4) [16:04:29:186]: Executing op: FileRemove(,FileName=C:\Program Files\SplunkUniversalForwarder\etc\system\default\literals.conf,,)
MSI (s) (54:B4) [16:04:29:202]: Note: 1: 2318 2:
MSI (s) (54:B4) [16:04:29:202]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\)
MSI (s) (54:B4) [16:04:29:202]: Executing op: FileRemove(,FileName=C:\Program Files\SplunkUniversalForwarder\openssl.cnf,,)
MSI (s) (54:B4) [16:04:29:202]: Note: 1: 2318 2:
MSI (s) (54:B4) [16:04:29:202]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\etc\system\README\)
MSI (s) (54:B4) [16:04:29:202]: Executing op: FileRemove(,FileName=C:\Program Files\SplunkUniversalForwarder\etc\system\README\web.conf.spec,,)
MSI (s) (54:B4) [16:04:29:202]: Note: 1: 2318 2:
MSI (s) (54:B4) [16:04:29:202]: Executing op: FileRemove(,FileName=C:\Program Files\SplunkUniversalForwarder\etc\system\README\wmi.conf.spec,,)
MSI (s) (54:B4) [16:04:29:202]: Note: 1: 2318 2:
MSI (s) (54:B4) [16:04:29:202]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\etc\system\default\)
MSI (s) (54:B4) [16:04:29:202]: Executing op: FileRemove(,FileName=C:\Program Files\SplunkUniversalForwarder\etc\system\default\source-classifier.conf,,)
MSI (s) (54:B4) [16:04:29:202]: Note: 1: 2318 2:
MSI (s) (54:B4) [16:04:29:202]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\bin\)
MSI (s) (54:B4) [16:04:29:202]: Executing op: FileRemove(,FileName=C:\Program Files\SplunkUniversalForwarder\bin\openssl.exe,,)
MSI (s) (54:B4) [16:04:29:202]: Note: 1: 2318 2:
MSI (s) (54:B4) [16:04:29:202]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\etc\auth\)
MSI (s) (54:B4) [16:04:29:202]: Executing op: FileRemove(,FileName=C:\Program Files\SplunkUniversalForwarder\etc\auth\cacert.pem.default,,)
MSI (s) (54:B4) [16:04:29:202]: Note: 1: 2318 2:
MSI (s) (54:B4) [16:04:29:202]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\bin\)
MSI (s) (54:B4) [16:04:29:202]: Executing op: FileRemove(,FileName=C:\Program Files\SplunkUniversalForwarder\bin\splknetdrv-vista.cat,,)
MSI (s) (54:B4) [16:04:29:202]: Note: 1: 2318 2:
MSI (s) (54:B4) [16:04:29:202]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\etc\system\README\)
MSI (s) (54:B4) [16:04:29:202]: Executing op: FileRemove(,FileName=C:\Program Files\SplunkUniversalForwarder\etc\system\README\outputs.conf.example,,)
MSI (s) (54:B4) [16:04:29:202]: Note: 1: 2318 2:
MSI (s) (54:B4) [16:04:29:202]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\bin\)
MSI (s) (54:B4) [16:04:29:202]: Executing op: FileRemove(,FileName=C:\Program Files\SplunkUniversalForwarder\bin\splunk-compresstool.exe,,)
MSI (s) (54:B4) [16:04:29:202]: Note: 1: 2318 2:
MSI (s) (54:B4) [16:04:29:202]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\etc\modules\input\exec\)
MSI (s) (54:B4) [16:04:29:202]: Executing op: FileRemove(,FileName=C:\Program Files\SplunkUniversalForwarder\etc\modules\input\exec\config.xml,,)
MSI (s) (54:B4) [16:04:29:202]: Note: 1: 2318 2:
MSI (s) (54:B4) [16:04:29:217]: Note: 1: 2318 2:
MSI (s) (54:B4) [16:04:29:217]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\share\splunk\3rdparty\)
MSI (s) (54:B4) [16:04:29:217]: Executing op: FileRemove(,FileName=C:\Program Files\SplunkUniversalForwarder\share\splunk\3rdparty\Copyright-for-nedmalloc.txt,,)
MSI (s) (54:B4) [16:04:29:217]: Note: 1: 2318 2:
MSI (s) (54:B4) [16:04:29:217]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\etc\system\README\)
MSI (s) (54:B4) [16:04:29:217]: Executing op: FileRemove(,FileName=C:\Program Files\SplunkUniversalForwarder\etc\system\README\audit.conf.example,,)
MSI (s) (54:B4) [16:04:29:217]: Note: 1: 2318 2:
MSI (s) (54:B4) [16:04:29:217]: Executing op: FileRemove(,FileName=C:\Program Files\SplunkUniversalForwarder\etc\system\README\user-seed.conf.example,,)
MSI (s) (54:B4) [16:04:29:217]: Note: 1: 2318 2:
MSI (s) (54:B4) [16:04:29:217]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\bin\)
MSI (s) (54:B4) [16:04:29:217]: Executing op: FileRemove(,FileName=C:\Program Files\SplunkUniversalForwarder\bin\splknetdrv-win8.sys,,)
MSI (s) (54:B4) [16:04:29:217]: Note: 1: 2318 2:
MSI (s) (54:B4) [16:04:29:217]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\bin\scripts\)
MSI (s) (54:B4) [16:04:29:217]: Executing op: FileRemove(,FileName=C:\Program Files\SplunkUniversalForwarder\bin\scripts\splunk-winevtlog.path,,)
MSI (s) (54:B4) [16:04:29:217]: Note: 1: 2318 2:
MSI (s) (54:B4) [16:04:29:217]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\etc\system\README\)
MSI (s) (54:B4) [16:04:29:217]: Executing op: FileRemove(,FileName=C:\Program Files\SplunkUniversalForwarder\etc\system\README\source-classifier.conf.spec,,)
MSI (s) (54:B4) [16:04:29:217]: Note: 1: 2318 2:
MSI (s) (54:B4) [16:04:29:217]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\share\splunk\3rdparty\)
MSI (s) (54:B4) [16:04:29:217]: Executing op: FileRemove(,FileName=C:\Program Files\SplunkUniversalForwarder\share\splunk\3rdparty\Copyright-for-srm-1.2.11.txt,,)
MSI (s) (54:B4) [16:04:29:217]: Note: 1: 2318 2:
MSI (s) (54:B4) [16:04:29:217]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\bin\)
MSI (s) (54:B4) [16:04:29:217]: Executing op: FileRemove(,FileName=C:\Program Files\SplunkUniversalForwarder\bin\splunk-wmi.exe,,)
MSI (s) (54:B4) [16:04:29:217]: Note: 1: 2318 2:
MSI (s) (54:B4) [16:04:29:217]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\share\splunk\)
MSI (s) (54:B4) [16:04:29:217]: Executing op: FileRemove(,FileName=C:\Program Files\SplunkUniversalForwarder\share\splunk\zoneinfo.tzpack,,)
MSI (s) (54:B4) [16:04:29:217]: Note: 1: 2318 2:
MSI (s) (54:B4) [16:04:29:233]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\bin\)
MSI (s) (54:B4) [16:04:29:233]: Executing op: FileRemove(,FileName=C:\Program Files\SplunkUniversalForwarder\bin\splunkdrv.cat,,)
MSI (s) (54:B4) [16:04:29:233]: Note: 1: 2318 2:
MSI (s) (54:B4) [16:04:29:233]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\etc\system\README\)
MSI (s) (54:B4) [16:04:29:233]: Executing op: FileRemove(,FileName=C:\Program Files\SplunkUniversalForwarder\etc\system\README\literals.conf.example,,)
MSI (s) (54:B4) [16:04:29:233]: Note: 1: 2318 2:
MSI (s) (54:B4) [16:04:29:233]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\etc\system\default\)
MSI (s) (54:B4) [16:04:29:233]: Executing op: FileRemove(,FileName=C:\Program Files\SplunkUniversalForwarder\etc\system\default\app.conf,,)
MSI (s) (54:B4) [16:04:29:233]: Note: 1: 2318 2:
MSI (s) (54:B4) [16:04:29:233]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\etc\)
MSI (s) (54:B4) [16:04:29:233]: Executing op: FileRemove(,FileName=C:\Program Files\SplunkUniversalForwarder\etc\datetime.xml,,)
MSI (s) (54:B4) [16:04:29:233]: Note: 1: 2318 2:
MSI (s) (54:B4) [16:04:29:233]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\etc\system\README\)
MSI (s) (54:B4) [16:04:29:233]: Executing op: FileRemove(,FileName=C:\Program Files\SplunkUniversalForwarder\etc\system\README\serverclass.seed.xml.example,,)
MSI (s) (54:B4) [16:04:29:233]: Note: 1: 2318 2:
MSI (s) (54:B4) [16:04:29:233]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\etc\apps\search\default\)
MSI (s) (54:B4) [16:04:29:233]: Executing op: FileRemove(,FileName=C:\Program Files\SplunkUniversalForwarder\etc\apps\search\default\app.conf,,)
MSI (s) (54:B4) [16:04:29:233]: Note: 1: 2318 2:
MSI (s) (54:B4) [16:04:29:233]: Note: 1: 2318 2:
MSI (s) (54:B4) [16:04:29:233]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\bin\)
MSI (s) (54:B4) [16:04:29:233]: Executing op: FileRemove(,FileName=C:\Program Files\SplunkUniversalForwarder\bin\SplunkMonitorNoHandledrv-win7.inf,,)
MSI (s) (54:B4) [16:04:29:233]: Note: 1: 2318 2:
MSI (s) (54:B4) [16:04:29:233]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\share\splunk\3rdparty\)
MSI (s) (54:B4) [16:04:29:233]: Executing op: FileRemove(,FileName=C:\Program Files\SplunkUniversalForwarder\share\splunk\3rdparty\Copyright-for-openldap-2.4.35.txt,,)
MSI (s) (54:B4) [16:04:29:233]: Note: 1: 2318 2:
MSI (s) (54:B4) [16:04:29:233]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\etc\system\default\)
MSI (s) (54:B4) [16:04:29:233]: Executing op: FileRemove(,FileName=C:\Program Files\SplunkUniversalForwarder\etc\system\default\props.conf,,)
MSI (s) (54:B4) [16:04:29:233]: Note: 1: 2318 2:
MSI (s) (54:B4) [16:04:29:233]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\etc\system\README\)
MSI (s) (54:B4) [16:04:29:248]: Executing op: FileRemove(,FileName=C:\Program Files\SplunkUniversalForwarder\etc\system\README\limits.conf.spec,,)
MSI (s) (54:B4) [16:04:29:248]: Note: 1: 2318 2:
MSI (s) (54:B4) [16:04:29:248]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\etc\modules\input\wineventlog\)
MSI (s) (54:B4) [16:04:29:248]: Executing op: FileRemove(,FileName=C:\Program Files\SplunkUniversalForwarder\etc\modules\input\wineventlog\config.xml,,)
MSI (s) (54:B4) [16:04:29:248]: Note: 1: 2318 2:
MSI (s) (54:B4) [16:04:29:248]: Note: 1: 2318 2:
MSI (s) (54:B4) [16:04:29:248]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\etc\system\bin\)
MSI (s) (54:B4) [16:04:29:248]: Executing op: FileRemove(,FileName=C:\Program Files\SplunkUniversalForwarder\etc\system\bin\WinRegMon.cmd,,)
MSI (s) (54:B4) [16:04:29:248]: Note: 1: 2318 2:
MSI (s) (54:B4) [16:04:29:248]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\bin\)
MSI (s) (54:B4) [16:04:29:248]: Executing op: FileRemove(,FileName=C:\Program Files\SplunkUniversalForwarder\bin\splunk.exe,,)
MSI (s) (54:B4) [16:04:29:248]: Note: 1: 2318 2:
MSI (s) (54:B4) [16:04:29:248]: Executing op: FileRemove(,FileName=C:\Program Files\SplunkUniversalForwarder\bin\libbson-1.0.dll,,)
MSI (s) (54:B4) [16:04:29:248]: Note: 1: 2318 2:
MSI (s) (54:B4) [16:04:29:248]: Executing op: FileRemove(,FileName=C:\Program Files\SplunkUniversalForwarder\bin\splunk-winhostinfo.exe,,)
MSI (s) (54:B4) [16:04:29:248]: Note: 1: 2318 2:
MSI (s) (54:B4) [16:04:29:248]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\share\splunk\3rdparty\)
MSI (s) (54:B4) [16:04:29:248]: Executing op: FileRemove(,FileName=C:\Program Files\SplunkUniversalForwarder\share\splunk\3rdparty\Copyright-for-minihook.txt,,)
MSI (s) (54:B4) [16:04:29:248]: Note: 1: 2318 2:
MSI (s) (54:B4) [16:04:29:248]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\bin\)
MSI (s) (54:B4) [16:04:29:248]: Executing op: FileRemove(,FileName=C:\Program Files\SplunkUniversalForwarder\bin\libeay32.dll,,)
MSI (s) (54:B4) [16:04:29:248]: Note: 1: 2318 2:
MSI (s) (54:B4) [16:04:29:248]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\bin\scripts\)
MSI (s) (54:B4) [16:04:29:248]: Executing op: FileRemove(,FileName=C:\Program Files\SplunkUniversalForwarder\bin\scripts\splunk-MonitorNoHandle.path,,)
MSI (s) (54:B4) [16:04:29:248]: Note: 1: 2318 2:
MSI (s) (54:B4) [16:04:29:248]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\bin\)
MSI (s) (54:B4) [16:04:29:264]: Executing op: FileRemove(,FileName=C:\Program Files\SplunkUniversalForwarder\bin\srm.exe,,)
MSI (s) (54:B4) [16:04:29:264]: Note: 1: 2318 2:
MSI (s) (54:B4) [16:04:29:264]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\bin\scripts\)
MSI (s) (54:B4) [16:04:29:264]: Executing op: FileRemove(,FileName=C:\Program Files\SplunkUniversalForwarder\bin\scripts\splunk-netmon.path,,)
MSI (s) (54:B4) [16:04:29:264]: Note: 1: 2318 2:
MSI (s) (54:B4) [16:04:29:264]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\bin\)
MSI (s) (54:B4) [16:04:29:264]: Executing op: FileRemove(,FileName=C:\Program Files\SplunkUniversalForwarder\bin\SplunkMonitorNoHandledrv-vista.cat,,)
MSI (s) (54:B4) [16:04:29:264]: Note: 1: 2318 2:
MSI (s) (54:B4) [16:04:29:264]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\etc\system\README\)
MSI (s) (54:B4) [16:04:29:264]: Executing op: FileRemove(,FileName=C:\Program Files\SplunkUniversalForwarder\etc\system\README\procmon-filters.conf.example,,)
MSI (s) (54:B4) [16:04:29:264]: Note: 1: 2318 2:
MSI (s) (54:B4) [16:04:29:264]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\bin\)
MSI (s) (54:B4) [16:04:29:264]: Executing op: FileRemove(,FileName=C:\Program Files\SplunkUniversalForwarder\bin\SplunkMonitorNoHandledrv-win7.sys,,)
MSI (s) (54:B4) [16:04:29:264]: Note: 1: 2318 2:
MSI (s) (54:B4) [16:04:29:264]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\bin\scripts\)
MSI (s) (54:B4) [16:04:29:264]: Executing op: FileRemove(,FileName=C:\Program Files\SplunkUniversalForwarder\bin\scripts\splunk-perfmon.path,,)
MSI (s) (54:B4) [16:04:29:264]: Note: 1: 2318 2:
MSI (s) (54:B4) [16:04:29:264]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\etc\system\default\)
MSI (s) (54:B4) [16:04:29:264]: Executing op: FileRemove(,FileName=C:\Program Files\SplunkUniversalForwarder\etc\system\default\web.conf,,)
MSI (s) (54:B4) [16:04:29:264]: Note: 1: 2318 2:
MSI (s) (54:B4) [16:04:29:264]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\bin\)
MSI (s) (54:B4) [16:04:29:264]: Executing op: FileRemove(,FileName=C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe,,)
MSI (s) (54:B4) [16:04:29:264]: Note: 1: 2318 2:
MSI (s) (54:B4) [16:04:29:264]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\lib\)
MSI (s) (54:B4) [16:04:29:264]: Executing op: FileRemove(,FileName=C:\Program Files\SplunkUniversalForwarder\lib\copyright.txt,,)
MSI (s) (54:B4) [16:04:29:264]: Note: 1: 2318 2:
MSI (s) (54:B4) [16:04:29:264]: Note: 1: 2318 2:
MSI (s) (54:B4) [16:04:29:280]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\etc\apps\SplunkUniversalForwarder\default\)
MSI (s) (54:B4) [16:04:29:280]: Executing op: FileRemove(,FileName=C:\Program Files\SplunkUniversalForwarder\etc\apps\SplunkUniversalForwarder\default\outputs.conf,,)
MSI (s) (54:B4) [16:04:29:280]: Note: 1: 2318 2:
MSI (s) (54:B4) [16:04:29:280]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\etc\)
MSI (s) (54:B4) [16:04:29:280]: Executing op: FileRemove(,FileName=C:\Program Files\SplunkUniversalForwarder\etc\log-btool.cfg,,)
MSI (s) (54:B4) [16:04:29:280]: Note: 1: 2318 2:
MSI (s) (54:B4) [16:04:29:280]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\share\splunk\)
MSI (s) (54:B4) [16:04:29:280]: Executing op: FileRemove(,FileName=C:\Program Files\SplunkUniversalForwarder\share\splunk\splunk-add-on-for-microsoft-windows_472.tgz,,)
MSI (s) (54:B4) [16:04:29:280]: Note: 1: 2318 2:
MSI (s) (54:B4) [16:04:29:280]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\etc\system\README\)
MSI (s) (54:B4) [16:04:29:280]: Executing op: FileRemove(,FileName=C:\Program Files\SplunkUniversalForwarder\etc\system\README\alert_actions.conf.spec,,)
MSI (s) (54:B4) [16:04:29:280]: Note: 1: 2318 2:
MSI (s) (54:B4) [16:04:29:280]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\bin\)
MSI (s) (54:B4) [16:04:29:280]: Executing op: FileRemove(,FileName=C:\Program Files\SplunkUniversalForwarder\bin\splunkdrv.inf,,)
MSI (s) (54:B4) [16:04:29:280]: Note: 1: 2318 2:
MSI (s) (54:B4) [16:04:29:280]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\etc\)
MSI (s) (54:B4) [16:04:29:280]: Executing op: FileRemove(,FileName=C:\Program Files\SplunkUniversalForwarder\etc\log-cmdline.cfg,,)
MSI (s) (54:B4) [16:04:29:280]: Note: 1: 2318 2:
MSI (s) (54:B4) [16:04:29:280]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\bin\)
MSI (s) (54:B4) [16:04:29:280]: Executing op: FileRemove(,FileName=C:\Program Files\SplunkUniversalForwarder\bin\splknetdrv-vista.sys,,)
MSI (s) (54:B4) [16:04:29:280]: Note: 1: 2318 2:
MSI (s) (54:B4) [16:04:29:280]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\etc\modules\input\UDP\)
MSI (s) (54:B4) [16:04:29:280]: Executing op: FileRemove(,FileName=C:\Program Files\SplunkUniversalForwarder\etc\modules\input\UDP\config.xml,,)
MSI (s) (54:B4) [16:04:29:280]: Note: 1: 2318 2:
MSI (s) (54:B4) [16:04:29:280]: Note: 1: 2318 2:
MSI (s) (54:B4) [16:04:29:280]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\etc\)
MSI (s) (54:B4) [16:04:29:280]: Executing op: FileRemove(,FileName=C:\Program Files\SplunkUniversalForwarder\etc\copyright.txt,,)
MSI (s) (54:B4) [16:04:29:280]: Note: 1: 2318 2:
MSI (s) (54:B4) [16:04:29:280]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\)
MSI (s) (54:B4) [16:04:29:280]: Executing op: FileRemove(,FileName=C:\Program Files\SplunkUniversalForwarder\manifest.txt,,)
MSI (s) (54:B4) [16:04:29:280]: Note: 1: 2318 2:
MSI (s) (54:B4) [16:04:29:280]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\etc\apps\learned\default\)
MSI (s) (54:B4) [16:04:29:295]: Executing op: FileRemove(,FileName=C:\Program Files\SplunkUniversalForwarder\etc\apps\learned\default\README,,)
MSI (s) (54:B4) [16:04:29:295]: Note: 1: 2318 2:
MSI (s) (54:B4) [16:04:29:295]: Note: 1: 2318 2:
MSI (s) (54:B4) [16:04:29:295]: Note: 1: 2318 2:
MSI (s) (54:B4) [16:04:29:295]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\etc\system\README\)
MSI (s) (54:B4) [16:04:29:295]: Executing op: FileRemove(,FileName=C:\Program Files\SplunkUniversalForwarder\etc\system\README\user-seed.conf.spec,,)
MSI (s) (54:B4) [16:04:29:295]: Note: 1: 2318 2:
MSI (s) (54:B4) [16:04:29:295]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\bin\)
MSI (s) (54:B4) [16:04:29:295]: Executing op: FileRemove(,FileName=C:\Program Files\SplunkUniversalForwarder\bin\classify.exe,,)
MSI (s) (54:B4) [16:04:29:295]: Note: 1: 2318 2:
MSI (s) (54:B4) [16:04:29:295]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\etc\system\README\)
MSI (s) (54:B4) [16:04:29:295]: Executing op: FileRemove(,FileName=C:\Program Files\SplunkUniversalForwarder\etc\system\README\alert_actions.conf.example,,)
MSI (s) (54:B4) [16:04:29:295]: Note: 1: 2318 2:
MSI (s) (54:B4) [16:04:29:295]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\etc\apps\introspection_generator_addon\bin\)
MSI (s) (54:B4) [16:04:29:295]: Executing op: FileRemove(,FileName=C:\Program Files\SplunkUniversalForwarder\etc\apps\introspection_generator_addon\bin\collector.path,,)
MSI (s) (54:B4) [16:04:29:295]: Note: 1: 2318 2:
MSI (s) (54:B4) [16:04:29:295]: Note: 1: 2318 2:
MSI (s) (54:B4) [16:04:29:295]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\bin\)
MSI (s) (54:B4) [16:04:29:295]: Executing op: FileRemove(,FileName=C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe,,)
MSI (s) (54:B4) [16:04:29:295]: Note: 1: 2318 2:
MSI (s) (54:B4) [16:04:29:295]: Executing op: FileRemove(,FileName=C:\Program Files\SplunkUniversalForwarder\bin\SplunkMonitorNoHandledrv-vista.sys,,)
MSI (s) (54:B4) [16:04:29:295]: Note: 1: 2318 2:
MSI (s) (54:B4) [16:04:29:295]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\etc\system\README\)
MSI (s) (54:B4) [16:04:29:295]: Executing op: FileRemove(,FileName=C:\Program Files\SplunkUniversalForwarder\etc\system\README\authorize.conf.example,,)
MSI (s) (54:B4) [16:04:29:295]: Note: 1: 2318 2:
MSI (s) (54:B4) [16:04:29:295]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\bin\)
MSI (s) (54:B4) [16:04:29:295]: Executing op: FileRemove(,FileName=C:\Program Files\SplunkUniversalForwarder\bin\splknetdrv-win7.cat,,)
MSI (s) (54:B4) [16:04:29:295]: Note: 1: 2318 2:
MSI (s) (54:B4) [16:04:29:295]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\etc\)
MSI (s) (54:B4) [16:04:29:295]: Executing op: FileRemove(,FileName=C:\Program Files\SplunkUniversalForwarder\etc\splunk.version,,)
MSI (s) (54:B4) [16:04:29:311]: Note: 1: 2318 2:
MSI (s) (54:B4) [16:04:29:311]: Executing op: FileRemove(,FileName=C:\Program Files\SplunkUniversalForwarder\etc\log.cfg,,)
MSI (s) (54:B4) [16:04:29:311]: Note: 1: 2318 2:
MSI (s) (54:B4) [16:04:29:311]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\etc\system\README\)
MSI (s) (54:B4) [16:04:29:311]: Executing op: FileRemove(,FileName=C:\Program Files\SplunkUniversalForwarder\etc\system\README\outputs.conf.spec,,)
MSI (s) (54:B4) [16:04:29:311]: Note: 1: 2318 2:
MSI (s) (54:B4) [16:04:29:311]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\bin\)
MSI (s) (54:B4) [16:04:29:311]: Executing op: FileRemove(,FileName=C:\Program Files\SplunkUniversalForwarder\bin\archive.dll,,)
MSI (s) (54:B4) [16:04:29:311]: Note: 1: 2318 2:
MSI (s) (54:B4) [16:04:29:311]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\etc\)
MSI (s) (54:B4) [16:04:29:311]: Executing op: FileRemove(,FileName=C:\Program Files\SplunkUniversalForwarder\etc\log-debug.cfg,,)
MSI (s) (54:B4) [16:04:29:311]: Note: 1: 2318 2:
MSI (s) (54:B4) [16:04:29:311]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\etc\apps\search\metadata\)
MSI (s) (54:B4) [16:04:29:311]: Executing op: FileRemove(,FileName=C:\Program Files\SplunkUniversalForwarder\etc\apps\search\metadata\default.meta,,)
MSI (s) (54:B4) [16:04:29:311]: Note: 1: 2318 2:
MSI (s) (54:B4) [16:04:29:311]: Note: 1: 2318 2:
MSI (s) (54:B4) [16:04:29:311]: Note: 1: 2318 2:
MSI (s) (54:B4) [16:04:29:311]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\etc\system\README\)
MSI (s) (54:B4) [16:04:29:311]: Executing op: FileRemove(,FileName=C:\Program Files\SplunkUniversalForwarder\etc\system\README\procmon-filters.conf.spec,,)
MSI (s) (54:B4) [16:04:29:311]: Note: 1: 2318 2:
MSI (s) (54:B4) [16:04:29:311]: Executing op: FileRemove(,FileName=C:\Program Files\SplunkUniversalForwarder\etc\system\README\default.meta.example,,)
MSI (s) (54:B4) [16:04:29:311]: Note: 1: 2318 2:
MSI (s) (54:B4) [16:04:29:311]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\bin\)
MSI (s) (54:B4) [16:04:29:311]: Executing op: FileRemove(,FileName=C:\Program Files\SplunkUniversalForwarder\bin\ssleay32.dll,,)
MSI (s) (54:B4) [16:04:29:311]: Note: 1: 2318 2:
MSI (s) (54:B4) [16:04:29:311]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\etc\system\README\)
MSI (s) (54:B4) [16:04:29:311]: Executing op: FileRemove(,FileName=C:\Program Files\SplunkUniversalForwarder\etc\system\README\splunk-launch.conf.spec,,)
MSI (s) (54:B4) [16:04:29:311]: Note: 1: 2318 2:
MSI (s) (54:B4) [16:04:29:311]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\bin\)
MSI (s) (54:B4) [16:04:29:311]: Executing op: FileRemove(,FileName=C:\Program Files\SplunkUniversalForwarder\bin\splunkdrv.sys,,)
MSI (s) (54:B4) [16:04:29:311]: Note: 1: 2318 2:
MSI (s) (54:B4) [16:04:29:311]: Executing op: FileRemove(,FileName=C:\Program Files\SplunkUniversalForwarder\bin\genRootCA.bat,,)
MSI (s) (54:B4) [16:04:29:327]: Note: 1: 2318 2:
MSI (s) (54:B4) [16:04:29:327]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\etc\system\README\)
MSI (s) (54:B4) [16:04:29:327]: Executing op: FileRemove(,FileName=C:\Program Files\SplunkUniversalForwarder\etc\system\README\authentication.conf.example,,)
MSI (s) (54:B4) [16:04:29:327]: Note: 1: 2318 2:
MSI (s) (54:B4) [16:04:29:327]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\etc\system\default\)
MSI (s) (54:B4) [16:04:29:327]: Executing op: FileRemove(,FileName=C:\Program Files\SplunkUniversalForwarder\etc\system\default\conf.conf,,)
MSI (s) (54:B4) [16:04:29:327]: Note: 1: 2318 2:
MSI (s) (54:B4) [16:04:29:327]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\etc\system\README\)
MSI (s) (54:B4) [16:04:29:327]: Executing op: FileRemove(,FileName=C:\Program Files\SplunkUniversalForwarder\etc\system\README\inputs.conf.spec,,)
MSI (s) (54:B4) [16:04:29:327]: Note: 1: 2318 2:
MSI (s) (54:B4) [16:04:29:327]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\etc\modules\input\tailfile\)
MSI (s) (54:B4) [16:04:29:327]: Executing op: FileRemove(,FileName=C:\Program Files\SplunkUniversalForwarder\etc\modules\input\tailfile\config.xml,,)
MSI (s) (54:B4) [16:04:29:327]: Note: 1: 2318 2:
MSI (s) (54:B4) [16:04:29:327]: Note: 1: 2318 2:
MSI (s) (54:B4) [16:04:29:327]: Note: 1: 2318 2:
MSI (s) (54:B4) [16:04:29:327]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\etc\system\README\)
MSI (s) (54:B4) [16:04:29:327]: Executing op: FileRemove(,FileName=C:\Program Files\SplunkUniversalForwarder\etc\system\README\restmap.conf.spec,,)
MSI (s) (54:B4) [16:04:29:327]: Note: 1: 2318 2:
MSI (s) (54:B4) [16:04:29:327]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\etc\system\bin\)
MSI (s) (54:B4) [16:04:29:327]: Executing op: FileRemove(,FileName=C:\Program Files\SplunkUniversalForwarder\etc\system\bin\WinPrintMon.cmd,,)
MSI (s) (54:B4) [16:04:29:327]: Note: 1: 2318 2:
MSI (s) (54:B4) [16:04:29:327]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\bin\)
MSI (s) (54:B4) [16:04:29:327]: Executing op: FileRemove(,FileName=C:\Program Files\SplunkUniversalForwarder\bin\msvcp110.dll,,)
MSI (s) (54:B4) [16:04:29:327]: Note: 1: 2318 2:
MSI (s) (54:B4) [16:04:29:327]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\etc\system\default\)
MSI (s) (54:B4) [16:04:29:327]: Executing op: FileRemove(,FileName=C:\Program Files\SplunkUniversalForwarder\etc\system\default\authentication.conf,,)
MSI (s) (54:B4) [16:04:29:327]: Note: 1: 2318 2:
MSI (s) (54:B4) [16:04:29:327]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\etc\system\README\)
MSI (s) (54:B4) [16:04:29:327]: Executing op: FileRemove(,FileName=C:\Program Files\SplunkUniversalForwarder\etc\system\README\audit.conf.spec,,)
MSI (s) (54:B4) [16:04:29:327]: Note: 1: 2318 2:
MSI (s) (54:B4) [16:04:29:327]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\share\splunk\3rdparty\)
MSI (s) (54:B4) [16:04:29:327]: Executing op: FileRemove(,FileName=C:\Program Files\SplunkUniversalForwarder\share\splunk\3rdparty\Copyright-for-libarchive-3.1.2.txt,,)
MSI (s) (54:B4) [16:04:29:327]: Note: 1: 2318 2:
MSI (s) (54:B4) [16:04:29:327]: Note: 1: 2318 2:
MSI (s) (54:B4) [16:04:29:342]: Note: 1: 2318 2:
MSI (s) (54:B4) [16:04:29:342]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\etc\system\README\)
MSI (s) (54:B4) [16:04:29:342]: Executing op: FileRemove(,FileName=C:\Program Files\SplunkUniversalForwarder\etc\system\README\limits.conf.example,,)
MSI (s) (54:B4) [16:04:29:342]: Note: 1: 2318 2:
MSI (s) (54:B4) [16:04:29:342]: Executing op: FileRemove(,FileName=C:\Program Files\SplunkUniversalForwarder\etc\system\README\authentication.conf.spec,,)
MSI (s) (54:B4) [16:04:29:342]: Note: 1: 2318 2:
MSI (s) (54:B4) [16:04:29:342]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\bin\)
MSI (s) (54:B4) [16:04:29:342]: Executing op: FileRemove(,FileName=C:\Program Files\SplunkUniversalForwarder\bin\splunkdrv-win6.inf,,)
MSI (s) (54:B4) [16:04:29:342]: Note: 1: 2318 2:
MSI (s) (54:B4) [16:04:29:342]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\etc\apps\introspection_generator_addon\default\)
MSI (s) (54:B4) [16:04:29:342]: Executing op: FileRemove(,FileName=C:\Program Files\SplunkUniversalForwarder\etc\apps\introspection_generator_addon\default\README,,)
MSI (s) (54:B4) [16:04:29:342]: Note: 1: 2318 2:
MSI (s) (54:B4) [16:04:29:342]: Note: 1: 2318 2:
MSI (s) (54:B4) [16:04:29:342]: Note: 1: 2318 2:
MSI (s) (54:B4) [16:04:29:342]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\etc\system\README\)
MSI (s) (54:B4) [16:04:29:342]: Executing op: FileRemove(,FileName=C:\Program Files\SplunkUniversalForwarder\etc\system\README\sourcetypes.conf.spec,,)
MSI (s) (54:B4) [16:04:29:342]: Note: 1: 2318 2:
MSI (s) (54:B4) [16:04:29:342]: Executing op: FileRemove(,FileName=C:\Program Files\SplunkUniversalForwarder\etc\system\README\instance.cfg.spec,,)
MSI (s) (54:B4) [16:04:29:342]: Note: 1: 2318 2:
MSI (s) (54:B4) [16:04:29:342]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\bin\)
MSI (s) (54:B4) [16:04:29:342]: Executing op: FileRemove(,FileName=C:\Program Files\SplunkUniversalForwarder\bin\libxslt.dll,,)
MSI (s) (54:B4) [16:04:29:342]: Note: 1: 2318 2:
MSI (s) (54:B4) [16:04:29:342]: Executing op: FileRemove(,FileName=C:\Program Files\SplunkUniversalForwarder\bin\splunk-perfmon.exe,,)
MSI (s) (54:B4) [16:04:29:342]: Note: 1: 2318 2:
MSI (s) (54:B4) [16:04:29:342]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\etc\modules\parsing\)
MSI (s) (54:B4) [16:04:29:342]: Executing op: FileRemove(,FileName=C:\Program Files\SplunkUniversalForwarder\etc\modules\parsing\config.xml,,)
MSI (s) (54:B4) [16:04:29:342]: Note: 1: 2318 2:
MSI (s) (54:B4) [16:04:29:342]: Note: 1: 2318 2:
MSI (s) (54:B4) [16:04:29:342]: Note: 1: 2318 2:
MSI (s) (54:B4) [16:04:29:358]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\etc\system\bin\)
MSI (s) (54:B4) [16:04:29:358]: Executing op: FileRemove(,FileName=C:\Program Files\SplunkUniversalForwarder\etc\system\bin\winEventLog.cmd,,)
MSI (s) (54:B4) [16:04:29:358]: Note: 1: 2318 2:
MSI (s) (54:B4) [16:04:29:358]: Note: 1: 2318 2:
MSI (s) (54:B4) [16:04:29:358]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\etc\system\README\)
MSI (s) (54:B4) [16:04:29:358]: Executing op: FileRemove(,FileName=C:\Program Files\SplunkUniversalForwarder\etc\system\README\instance.cfg.example,,)
MSI (s) (54:B4) [16:04:29:436]: Note: 1: 2318 2:
MSI (s) (54:B4) [16:04:29:436]: Note: 1: 2318 2:
MSI (s) (54:B4) [16:04:29:436]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\bin\)
MSI (s) (54:B4) [16:04:29:436]: Executing op: FileRemove(,FileName=C:\Program Files\SplunkUniversalForwarder\bin\splunk-winevtlog.exe,,)
MSI (s) (54:B4) [16:04:29:436]: Note: 1: 2318 2:
MSI (s) (54:B4) [16:04:29:436]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\etc\system\default\)
MSI (s) (54:B4) [16:04:29:436]: Executing op: FileRemove(,FileName=C:\Program Files\SplunkUniversalForwarder\etc\system\default\outputs.conf,,)
MSI (s) (54:B4) [16:04:29:436]: Note: 1: 2318 2:
MSI (s) (54:B4) [16:04:29:436]: Note: 1: 2318 2:
MSI (s) (54:B4) [16:04:29:436]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\etc\)
MSI (s) (54:B4) [16:04:29:436]: Executing op: FileRemove(,FileName=C:\Program Files\SplunkUniversalForwarder\etc\prettyprint.xsl,,)
MSI (s) (54:B4) [16:04:29:436]: Note: 1: 2318 2:
MSI (s) (54:B4) [16:04:29:436]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\bin\)
MSI (s) (54:B4) [16:04:29:436]: Executing op: FileRemove(,FileName=C:\Program Files\SplunkUniversalForwarder\bin\SplunkMonitorNoHandledrv-win7.cat,,)
MSI (s) (54:B4) [16:04:29:436]: Note: 1: 2318 2:
MSI (s) (54:B4) [16:04:29:436]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\bin\scripts\)
MSI (s) (54:B4) [16:04:29:436]: Executing op: FileRemove(,FileName=C:\Program Files\SplunkUniversalForwarder\bin\scripts\splunk-wmi.path,,)
MSI (s) (54:B4) [16:04:29:436]: Note: 1: 2318 2:
MSI (s) (54:B4) [16:04:29:436]: Note: 1: 2318 2:
MSI (s) (54:B4) [16:04:29:436]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\share\)
MSI (s) (54:B4) [16:04:29:436]: Executing op: FileRemove(,FileName=C:\Program Files\SplunkUniversalForwarder\share\copyright.txt,,)
MSI (s) (54:B4) [16:04:29:436]: Note: 1: 2318 2:
MSI (s) (54:B4) [16:04:29:436]: Note: 1: 2318 2:
MSI (s) (54:B4) [16:04:29:452]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\bin\)
MSI (s) (54:B4) [16:04:29:452]: Executing op: FileRemove(,FileName=C:\Program Files\SplunkUniversalForwarder\bin\SplunkMonitorNoHandledrv-win8.inf,,)
MSI (s) (54:B4) [16:04:29:452]: Note: 1: 2318 2:
MSI (s) (54:B4) [16:04:29:452]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\etc\apps\SplunkUniversalForwarder\default\)
MSI (s) (54:B4) [16:04:29:452]: Executing op: FileRemove(,FileName=C:\Program Files\SplunkUniversalForwarder\etc\apps\SplunkUniversalForwarder\default\limits.conf,,)
MSI (s) (54:B4) [16:04:29:452]: Note: 1: 2318 2:
MSI (s) (54:B4) [16:04:29:452]: Note: 1: 2318 2:
MSI (s) (54:B4) [16:04:29:452]: Note: 1: 2318 2:
MSI (s) (54:B4) [16:04:29:452]: Note: 1: 2318 2:
MSI (s) (54:B4) [16:04:29:452]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\etc\auth\)
MSI (s) (54:B4) [16:04:29:452]: Executing op: FileRemove(,FileName=C:\Program Files\SplunkUniversalForwarder\etc\auth\ca.pem.default,,)
MSI (s) (54:B4) [16:04:29:452]: Note: 1: 2318 2:
MSI (s) (54:B4) [16:04:29:452]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\bin\)
MSI (s) (54:B4) [16:04:29:452]: Executing op: FileRemove(,FileName=C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe,,)
MSI (s) (54:B4) [16:04:29:452]: Note: 1: 2318 2:
MSI (s) (54:B4) [16:04:29:452]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\etc\)
MSI (s) (54:B4) [16:04:29:452]: Executing op: FileRemove(,FileName=C:\Program Files\SplunkUniversalForwarder\etc\log-cmdline-debug.cfg,,)
MSI (s) (54:B4) [16:04:29:452]: Note: 1: 2318 2:
MSI (s) (54:B4) [16:04:29:452]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\bin\)
MSI (s) (54:B4) [16:04:29:452]: Executing op: FileRemove(,FileName=C:\Program Files\SplunkUniversalForwarder\bin\libexslt.dll,,)
MSI (s) (54:B4) [16:04:29:452]: Note: 1: 2318 2:
MSI (s) (54:B4) [16:04:29:452]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\etc\system\static\)
MSI (s) (54:B4) [16:04:29:452]: Executing op: FileRemove(,FileName=C:\Program Files\SplunkUniversalForwarder\etc\system\static\atom.xsl,,)
MSI (s) (54:B4) [16:04:29:452]: Note: 1: 2318 2:
MSI (s) (54:B4) [16:04:29:452]: Note: 1: 2318 2:
MSI (s) (54:B4) [16:04:29:452]: Executing op: SetTargetFolder(Folder=C:\Program Files\SplunkUniversalForwarder\bin\)
MSI (s) (54:B4) [16:04:29:452]: Executing op: FileRemove(,FileName=C:\Program Files\SplunkUniversalForwarder\bin\splunkd.exe,,)
MSI (s) (54:B4) [16:04:29:467]: Note: 1: 2318 2:
MSI (s) (54:B4) [16:04:29:467]: Note: 1: 2318 2:
Rollback: Updating component registration
MSI (s) (54:B4) [16:04:29:467]: Executing op: ActionStart(Name=ProcessComponents,Description=Updating component registration,)
MSI (s) (54:B4) [16:04:29:467]: Executing op: ComponentUnregister(ComponentId={3C304738-157A-4819-8CE3-47EEE2501418},ProductKey={D77B0D44-D35B-4BD3-A54E-89CBAE2086E6},BinaryType=1,)
MSI (s) (54:B4) [16:04:29:467]: Executing op: ComponentUnregister(ComponentId={07F7EE91-CD0A-443F-82CC-24A662A42BDA},ProductKey={D77B0D44-D35B-4BD3-A54E-89CBAE2086E6},BinaryType=1,)
MSI (s) (54:B4) [16:04:29:467]: Executing op: ComponentUnregister(ComponentId={914E5980-9333-43D1-8852-70485B15BCAA},ProductKey={D77B0D44-D35B-4BD3-A54E-89CBAE2086E6},BinaryType=1,)
MSI (s) (54:B4) [16:04:29:467]: Executing op: ComponentUnregister(ComponentId={6F316B98-F42F-42E6-AD62-CA6F59EA5768},ProductKey={D77B0D44-D35B-4BD3-A54E-89CBAE2086E6},BinaryType=1,)
MSI (s) (54:B4) [16:04:29:467]: Executing op: ComponentUnregister(ComponentId={E9EC1DE4-C4E0-4846-9E8D-991E8420619F},ProductKey={D77B0D44-D35B-4BD3-A54E-89CBAE2086E6},BinaryType=1,)
MSI (s) (54:B4) [16:04:29:467]: Executing op: ComponentUnregister(ComponentId={4EB368CA-DF28-4B12-997C-CF2427D2CA66},ProductKey={D77B0D44-D35B-4BD3-A54E-89CBAE2086E6},BinaryType=1,)
MSI (s) (54:B4) [16:04:29:467]: Executing op: ComponentUnregister(ComponentId={8F2C126D-C131-4123-94FF-2D2A58C1CAAF},ProductKey={D77B0D44-D35B-4BD3-A54E-89CBAE2086E6},BinaryType=1,)
MSI (s) (54:B4) [16:04:29:467]: Executing op: ComponentUnregister(ComponentId={D2D072B4-E952-4FE4-8B01-1FFB4E81817B},ProductKey={D77B0D44-D35B-4BD3-A54E-89CBAE2086E6},BinaryType=1,)
MSI (s) (54:B4) [16:04:29:467]: Executing op: ComponentUnregister(ComponentId={DF900B94-590E-46E6-A486-8AB376BB4010},ProductKey={D77B0D44-D35B-4BD3-A54E-89CBAE2086E6},BinaryType=1,)
MSI (s) (54:B4) [16:04:29:467]: Executing op: ComponentUnregister(ComponentId={DBDB1A77-B0AC-4AB6-9CF8-DE8F26B6C73C},ProductKey={D77B0D44-D35B-4BD3-A54E-89CBAE2086E6},BinaryType=1,)
MSI (s) (54:B4) [16:04:29:467]: Executing op: ComponentUnregister(ComponentId={2BE6AA40-2D07-46C5-B569-77B2C1BC6122},ProductKey={D77B0D44-D35B-4BD3-A54E-89CBAE2086E6},BinaryType=1,)
MSI (s) (54:B4) [16:04:29:467]: Executing op: ComponentUnregister(ComponentId={9E4D8F12-D7A5-4D28-B7DA-9A785CAC32F0},ProductKey={D77B0D44-D35B-4BD3-A54E-89CBAE2086E6},BinaryType=1,)
MSI (s) (54:B4) [16:04:29:467]: Executing op: ComponentUnregister(ComponentId={90E11881-B0E2-4C7D-BB1F-9CC5CA611804},ProductKey={D77B0D44-D35B-4BD3-A54E-89CBAE2086E6},BinaryType=1,)
MSI (s) (54:B4) [16:04:29:467]: Executing op: ComponentUnregister(ComponentId={7A6AC965-1047-41E6-80F5-CC41FCAF97B8},ProductKey={D77B0D44-D35B-4BD3-A54E-89CBAE2086E6},BinaryType=1,)
MSI (s) (54:B4) [16:04:29:467]: Executing op: ComponentUnregister(ComponentId={5700C319-2F96-4866-A964-93822964D68B},ProductKey={D77B0D44-D35B-4BD3-A54E-89CBAE2086E6},BinaryType=1,)
MSI (s) (54:B4) [16:04:29:483]: Executing op: ComponentUnregister(ComponentId={4F753E4F-2D68-4FE4-A35B-380A7D1A0BDF},ProductKey={D77B0D44-D35B-4BD3-A54E-89CBAE2086E6},BinaryType=1,)
MSI (s) (54:B4) [16:04:29:483]: Executing op: ComponentUnregister(ComponentId={EA6EF263-5B13-485B-9C71-3BD7D773A19A},ProductKey={D77B0D44-D35B-4BD3-A54E-89CBAE2086E6},BinaryType=1,)
MSI (s) (54:B4) [16:04:29:483]: Executing op: ComponentUnregister(ComponentId={9DD7F214-E2B5-4933-B8C3-6578973AC782},ProductKey={D77B0D44-D35B-4BD3-A54E-89CBAE2086E6},BinaryType=1,)
MSI (s) (54:B4) [16:04:29:483]: Executing op: ComponentUnregister(ComponentId={135F3BCB-2716-4729-9198-5FF7D06E8BE3},ProductKey={D77B0D44-D35B-4BD3-A54E-89CBAE2086E6},BinaryType=1,)
MSI (s) (54:B4) [16:04:29:483]: Executing op: ComponentUnregister(ComponentId={945A6BC1-43D3-46F2-B4AD-DB2933114A33},ProductKey={D77B0D44-D35B-4BD3-A54E-89CBAE2086E6},BinaryType=1,)
MSI (s) (54:B4) [16:04:29:483]: Executing op: ComponentUnregister(ComponentId={283EF54B-19CD-4D2C-8BB8-264483A06C2C},ProductKey={D77B0D44-D35B-4BD3-A54E-89CBAE2086E6},BinaryType=1,)
MSI (s) (54:B4) [16:04:29:483]: Executing op: ComponentUnregister(ComponentId={D6AC106B-4B27-4C29-B5B5-BAD31547E089},ProductKey={D77B0D44-D35B-4BD3-A54E-89CBAE2086E6},BinaryType=1,)
MSI (s) (54:B4) [16:04:29:483]: Executing op: ComponentUnregister(ComponentId={CC0F02CD-BE87-45FE-8752-E8FCDE7F6381},ProductKey={D77B0D44-D35B-4BD3-A54E-89CBAE2086E6},BinaryType=1,)
MSI (s) (54:B4) [16:04:29:483]: Executing op: ComponentUnregister(ComponentId={06D97409-5369-47C7-9A52-14F5D1D05D2C},ProductKey={D77B0D44-D35B-4BD3-A54E-89CBAE2086E6},BinaryType=1,)
MSI (s) (54:B4) [16:04:29:483]: Executing op: ComponentUnregister(ComponentId={5099CEF3-F0DE-49CC-87DE-4D8B537F6BB0},ProductKey={D77B0D44-D35B-4BD3-A54E-89CBAE2086E6},BinaryType=1,)
MSI (s) (54:B4) [16:04:29:483]: Executing op: ComponentUnregister(ComponentId={A8BE050B-EAEA-4984-AFB9-F88BED9352C1},ProductKey={D77B0D44-D35B-4BD3-A54E-89CBAE2086E6},BinaryType=1,)
MSI (s) (54:B4) [16:04:29:483]: Executing op: ComponentUnregister(ComponentId={F7CEF91B-75C6-4E5C-804D-BAF4A6DBB4B6},ProductKey={D77B0D44-D35B-4BD3-A54E-89CBAE2086E6},BinaryType=1,)
MSI (s) (54:B4) [16:04:29:483]: Executing op: ComponentUnregister(ComponentId={48DDA6E4-1A1E-410A-B395-00949A208314},ProductKey={D77B0D44-D35B-4BD3-A54E-89CBAE2086E6},BinaryType=1,)
MSI (s) (54:B4) [16:04:29:483]: Executing op: ComponentUnregister(ComponentId={8C4C0218-0DC0-444B-BD3E-9E4FCC567DE8},ProductKey={D77B0D44-D35B-4BD3-A54E-89CBAE2086E6},BinaryType=1,)
MSI (s) (54:B4) [16:04:29:483]: Executing op: ComponentUnregister(ComponentId={FCFFA3B5-6057-42B7-9DDF-94CD8F4EA1AD},ProductKey={D77B0D44-D35B-4BD3-A54E-89CBAE2086E6},BinaryType=1,)
MSI (s) (54:B4) [16:04:29:483]: Executing op: ComponentUnregister(ComponentId={4B9C0342-C4C0-49CC-9EAF-93DD25CA5EB7},ProductKey={D77B0D44-D35B-4BD3-A54E-89CBAE2086E6},BinaryType=1,)
MSI (s) (54:B4) [16:04:29:483]: Executing op: ComponentUnregister(ComponentId={4B964690-3F27-46FC-97B7-40E278E9223A},ProductKey={D77B0D44-D35B-4BD3-A54E-89CBAE2086E6},BinaryType=1,)
MSI (s) (54:B4) [16:04:29:483]: Executing op: ComponentUnregister(ComponentId={2B032938-8AE7-4A62-90CD-6533EF9C63D2},ProductKey={D77B0D44-D35B-4BD3-A54E-89CBAE2086E6},BinaryType=1,)
MSI (s) (54:B4) [16:04:29:498]: Executing op: ComponentUnregister(ComponentId={282911C2-683E-4C6E-815C-E4A283B2CABA},ProductKey={D77B0D44-D35B-4BD3-A54E-89CBAE2086E6},BinaryType=1,)
MSI (s) (54:B4) [16:04:29:498]: Executing op: ComponentUnregister(ComponentId={3283D22D-DE0C-48B0-BE10-7F4C65401626},ProductKey={D77B0D44-D35B-4BD3-A54E-89CBAE2086E6},BinaryType=1,)
MSI (s) (54:B4) [16:04:29:498]: Executing op: ComponentUnregister(ComponentId={506BAF65-9F88-4A0C-B469-A96BC68DE1F8},ProductKey={D77B0D44-D35B-4BD3-A54E-89CBAE2086E6},BinaryType=1,)
MSI (s) (54:B4) [16:04:29:498]: Executing op: ComponentUnregister(ComponentId={4984C996-2041-43F3-99F1-416E7F4952C0},ProductKey={D77B0D44-D35B-4BD3-A54E-89CBAE2086E6},BinaryType=1,)
MSI (s) (54:B4) [16:04:29:498]: Executing op: ComponentUnregister(ComponentId={D41202B6-C36C-4669-854F-0DD814A1C63F},ProductKey={D77B0D44-D35B-4BD3-A54E-89CBAE2086E6},BinaryType=1,)
MSI (s) (54:B4) [16:04:29:498]: Executing op: ComponentUnregister(ComponentId={54C7C590-31A1-4876-A770-BC25622DC7C8},ProductKey={D77B0D44-D35B-4BD3-A54E-89CBAE2086E6},BinaryType=1,)
MSI (s) (54:B4) [16:04:29:498]: Executing op: ComponentUnregister(ComponentId={BF237E6B-3F47-47F3-9DC3-29372FB8F86F},ProductKey={D77B0D44-D35B-4BD3-A54E-89CBAE2086E6},BinaryType=1,)
MSI (s) (54:B4) [16:04:29:498]: Executing op: ComponentUnregister(ComponentId={668E8A8E-E408-423F-BB2F-A831E3E23F7D},ProductKey={D77B0D44-D35B-4BD3-A54E-89CBAE2086E6},BinaryType=1,)
MSI (s) (54:B4) [16:04:29:498]: Executing op: ComponentUnregister(ComponentId={4A217C49-5EE9-44B5-BBA9-6CE88E761023},ProductKey={D77B0D44-D35B-4BD3-A54E-89CBAE2086E6},BinaryType=1,)
MSI (s) (54:B4) [16:04:29:498]: Executing op: ComponentUnregister(ComponentId={0D1430F8-66F0-4949-83EF-BE631068FF57},ProductKey={D77B0D44-D35B-4BD3-A54E-89CBAE2086E6},BinaryType=1,)
MSI (s) (54:B4) [16:04:29:498]: Executing op: ComponentUnregister(ComponentId={7FBBE4AA-C452-4E9D-880B-D7DF6250F3AC},ProductKey={D77B0D44-D35B-4BD3-A54E-89CBAE2086E6},BinaryType=1,)
MSI (s) (54:B4) [16:04:29:498]: Executing op: ComponentUnregister(ComponentId={6F0E75AC-B29E-4BC3-8F47-B6C28123F207},ProductKey={D77B0D44-D35B-4BD3-A54E-89CBAE2086E6},BinaryType=1,)
MSI (s) (54:B4) [16:04:29:498]: Executing op: ComponentUnregister(ComponentId={F08A6089-B4DA-4D26-B688-9404339A5AE8},ProductKey={D77B0D44-D35B-4BD3-A54E-89CBAE2086E6},BinaryType=1,)
MSI (s) (54:B4) [16:04:29:498]: Executing op: ComponentUnregister(ComponentId={D8184DF8-E81B-4D04-B5D1-F7527B833769},ProductKey={D77B0D44-D35B-4BD3-A54E-89CBAE2086E6},BinaryType=1,)
MSI (s) (54:B4) [16:04:29:498]: Executing op: ComponentUnregister(ComponentId={3DBAB8C6-FB9D-44AF-8213-E3E7491EC5F1},ProductKey={D77B0D44-D35B-4BD3-A54E-89CBAE2086E6},BinaryType=1,)
MSI (s) (54:B4) [16:04:29:498]: Executing op: ComponentUnregister(ComponentId={FD189376-2328-458F-82BD-BCC194FBF33E},ProductKey={D77B0D44-D35B-4BD3-A54E-89CBAE2086E6},BinaryType=1,)
MSI (s) (54:B4) [16:04:29:498]: Executing op: ComponentUnregister(ComponentId={F0D2CAF4-9AC1-4E39-8D26-A1BFF144B2D3},ProductKey={D77B0D44-D35B-4BD3-A54E-89CBAE2086E6},BinaryType=1,)
MSI (s) (54:B4) [16:04:29:498]: Executing op: ComponentUnregister(ComponentId={A17798DB-8049-4DB2-BE8C-BF6F17FC3B77},ProductKey={D77B0D44-D35B-4BD3-A54E-89CBAE2086E6},BinaryType=1,)
MSI (s) (54:B4) [16:04:29:498]: Executing op: ComponentUnregister(ComponentId={2247DC7B-7D92-4526-B28B-E15BBA522AB3},ProductKey={D77B0D44-D35B-4BD3-A54E-89CBAE2086E6},BinaryType=1,)
MSI (s) (54:B4) [16:04:29:514]: Executing op: ComponentUnregister(ComponentId={88C52A37-D827-4DA7-A7F6-789BA69FD710},ProductKey={D77B0D44-D35B-4BD3-A54E-89CBAE2086E6},BinaryType=1,)
MSI (s) (54:B4) [16:04:29:514]: Executing op: ComponentUnregister(ComponentId={73A2E54B-51E9-4413-A0CA-AF9781716232},ProductKey={D77B0D44-D35B-4BD3-A54E-89CBAE2086E6},BinaryType=1,)
MSI (s) (54:B4) [16:04:29:514]: Executing op: ComponentUnregister(ComponentId={4EAC1DBB-C3FF-4626-AC58-3468FC3494F4},ProductKey={D77B0D44-D35B-4BD3-A54E-89CBAE2086E6},BinaryType=1,)
MSI (s) (54:B4) [16:04:29:514]: Executing op: ComponentUnregister(ComponentId={FD9D1D21-5D56-46B0-9C5A-90FD414095A0},ProductKey={D77B0D44-D35B-4BD3-A54E-89CBAE2086E6},BinaryType=1,)
MSI (s) (54:B4) [16:04:29:514]: Executing op: ComponentUnregister(ComponentId={E2DC6E27-27BD-4706-BD0D-4CFD4E24A5E7},ProductKey={D77B0D44-D35B-4BD3-A54E-89CBAE2086E6},BinaryType=1,)
MSI (s) (54:B4) [16:04:29:514]: Executing op: ComponentUnregister(ComponentId={F40737C9-9260-478F-B727-15867EF76F05},ProductKey={D77B0D44-D35B-4BD3-A54E-89CBAE2086E6},BinaryType=1,)
MSI (s) (54:B4) [16:04:29:514]: Executing op: ComponentUnregister(ComponentId={921A9346-21DC-4114-8CBF-5D874BE71C89},ProductKey={D77B0D44-D35B-4BD3-A54E-89CBAE2086E6},BinaryType=1,)
MSI (s) (54:B4) [16:04:29:514]: Executing op: ComponentUnregister(ComponentId={14BE6B71-675C-45DE-9654-10B9DD6FDA2E},ProductKey={D77B0D44-D35B-4BD3-A54E-89CBAE2086E6},BinaryType=1,)
MSI (s) (54:B4) [16:04:29:514]: Executing op: ComponentUnregister(ComponentId={E6181469-6F05-4479-B9B7-022BB65824C6},ProductKey={D77B0D44-D35B-4BD3-A54E-89CBAE2086E6},BinaryType=1,)
MSI (s) (54:B4) [16:04:29:514]: Executing op: ComponentUnregister(ComponentId={24C938CF-1598-471B-8DAD-8D27ABB56408},ProductKey={D77B0D44-D35B-4BD3-A54E-89CBAE2086E6},BinaryType=1,)
MSI (s) (54:B4) [16:04:29:514]: Executing op: ComponentUnregister(ComponentId={7E6DE8E6-B2A2-40A9-89AA-18F3864D218E},ProductKey={D77B0D44-D35B-4BD3-A54E-89CBAE2086E6},BinaryType=1,)
MSI (s) (54:B4) [16:04:29:514]: Executing op: ComponentUnregister(ComponentId={7DE368CA-4D56-4B1F-B732-6422A34A99E6},ProductKey={D77B0D44-D35B-4BD3-A54E-89CBAE2086E6},BinaryType=1,)
MSI (s) (54:B4) [16:04:29:514]: Executing op: ComponentUnregister(ComponentId={15861566-1FE1-4166-9F77-A9DA2E88575B},ProductKey={D77B0D44-D35B-4BD3-A54E-89CBAE2086E6},BinaryType=1,)
MSI (s) (54:B4) [16:04:29:514]: Executing op: ComponentUnregister(ComponentId={83B6AAC7-F72B-407C-BF3C-DFE4F727B2C9},ProductKey={D77B0D44-D35B-4BD3-A54E-89CBAE2086E6},BinaryType=1,)
MSI (s) (54:B4) [16:04:29:514]: Executing op: ComponentUnregister(ComponentId={3B15D4D0-196F-444F-99B2-46E4C9EB9ABD},ProductKey={D77B0D44-D35B-4BD3-A54E-89CBAE2086E6},BinaryType=1,)
MSI (s) (54:B4) [16:04:29:514]: Executing op: ComponentUnregister(ComponentId={2D8165F0-8172-455A-8100-B1F94BDD4767},ProductKey={D77B0D44-D35B-4BD3-A54E-89CBAE2086E6},BinaryType=1,)
MSI (s) (54:B4) [16:04:29:514]: Executing op: ComponentUnregister(ComponentId={3909653F-BB34-4AB5-ACEC-3FC256629969},ProductKey={D77B0D44-D35B-4BD3-A54E-89CBAE2086E6},BinaryType=1,)
MSI (s) (54:B4) [16:04:29:514]: Executing op: ComponentUnregister(ComponentId={121B3D52-2070-46C6-AFC2-B5FE11FD92D2},ProductKey={D77B0D44-D35B-4BD3-A54E-89CBAE2086E6},BinaryType=1,)
MSI (s) (54:B4) [16:04:29:530]: Executing op: ComponentUnregister(ComponentId={EAB56942-25D2-455D-BA3E-7AE964BAD9C1},ProductKey={D77B0D44-D35B-4BD3-A54E-89CBAE2086E6},BinaryType=1,)
MSI (s) (54:B4) [16:04:29:530]: Executing op: ComponentUnregister(ComponentId={F0228B11-0BF0-4A9B-8451-7319CAA08C4E},ProductKey={D77B0D44-D35B-4BD3-A54E-89CBAE2086E6},BinaryType=1,)
MSI (s) (54:B4) [16:04:29:530]: Executing op: ComponentUnregister(ComponentId={9253189C-A4DC-4799-9887-FE98D5FC7911},ProductKey={D77B0D44-D35B-4BD3-A54E-89CBAE2086E6},BinaryType=1,)
MSI (s) (54:B4) [16:04:29:530]: Executing op: ComponentUnregister(ComponentId={FFAA8DF7-5AAF-4A74-AAD3-7318C4D4BA2F},ProductKey={D77B0D44-D35B-4BD3-A54E-89CBAE2086E6},BinaryType=1,)
MSI (s) (54:B4) [16:04:29:530]: Executing op: ComponentUnregister(ComponentId={8CD10750-7041-4894-82CB-EB8F7FC17BD8},ProductKey={D77B0D44-D35B-4BD3-A54E-89CBAE2086E6},BinaryType=1,)
MSI (s) (54:B4) [16:04:29:530]: Executing op: ComponentUnregister(ComponentId={AE8D8033-0D1D-478C-9D84-6462F1AA0CD3},ProductKey={D77B0D44-D35B-4BD3-A54E-89CBAE2086E6},BinaryType=1,)
MSI (s) (54:B4) [16:04:29:530]: Executing op: ComponentUnregister(ComponentId={662C89C6-17AD-40FE-A949-5FD56DDA60FF},ProductKey={D77B0D44-D35B-4BD3-A54E-89CBAE2086E6},BinaryType=1,)
MSI (s) (54:B4) [16:04:29:530]: Executing op: ComponentUnregister(ComponentId={D14C478C-2FE5-4D80-B6DB-3F38583B8670},ProductKey={D77B0D44-D35B-4BD3-A54E-89CBAE2086E6},BinaryType=1,)
MSI (s) (54:B4) [16:04:29:530]: Executing op: ComponentUnregister(ComponentId={73D3487B-0142-4281-919B-4145EEFABD6B},ProductKey={D77B0D44-D35B-4BD3-A54E-89CBAE2086E6},BinaryType=1,)
MSI (s) (54:B4) [16:04:29:530]: Executing op: ComponentUnregister(ComponentId={1DA41F2C-4E34-472C-AEFE-97135EF018B4},ProductKey={D77B0D44-D35B-4BD3-A54E-89CBAE2086E6},BinaryType=1,)
MSI (s) (54:B4) [16:04:29:530]: Executing op: ComponentUnregister(ComponentId={949A92D8-494E-4448-8321-3FEA9C9FC0F9},ProductKey={D77B0D44-D35B-4BD3-A54E-89CBAE2086E6},BinaryType=1,)
MSI (s) (54:B4) [16:04:29:530]: Executing op: ComponentUnregister(ComponentId={F6032DFF-042A-4288-8700-A9E06042A815},ProductKey={D77B0D44-D35B-4BD3-A54E-89CBAE2086E6},BinaryType=1,)
MSI (s) (54:B4) [16:04:29:530]: Executing op: ComponentUnregister(ComponentId={0385BD08-BB3A-440E-93D1-0CF6DF0A979D},ProductKey={D77B0D44-D35B-4BD3-A54E-89CBAE2086E6},BinaryType=1,)
MSI (s) (54:B4) [16:04:29:530]: Executing op: ComponentUnregister(ComponentId={E3F6E262-987D-4388-AC99-7543BEFA8270},ProductKey={D77B0D44-D35B-4BD3-A54E-89CBAE2086E6},BinaryType=1,)
MSI (s) (54:B4) [16:04:29:530]: Executing op: ComponentUnregister(ComponentId={98B908BC-02F5-4CF4-BCFD-7E3D7BD5C8D9},ProductKey={D77B0D44-D35B-4BD3-A54E-89CBAE2086E6},BinaryType=1,)
MSI (s) (54:B4) [16:04:29:530]: Executing op: ComponentUnregister(ComponentId={137506E1-1F7B-417F-9087-33A293A95A5C},ProductKey={D77B0D44-D35B-4BD3-A54E-89CBAE2086E6},BinaryType=1,)
MSI (s) (54:B4) [16:04:29:530]: Executing op: ComponentUnregister(ComponentId={212F18AA-8DCF-4926-A66B-DCF7B881F43B},ProductKey={D77B0D44-D35B-4BD3-A54E-89CBAE2086E6},BinaryType=1,)
MSI (s) (54:B4) [16:04:29:530]: Executing op: ComponentUnregister(ComponentId={A37F115C-F15B-46F6-B569-FBF3681F69F6},ProductKey={D77B0D44-D35B-4BD3-A54E-89CBAE2086E6},BinaryType=1,)
MSI (s) (54:B4) [16:04:29:545]: Executing op: ComponentUnregister(ComponentId={2978B3AC-39BF-48F7-B125-C094183ED18B},ProductKey={D77B0D44-D35B-4BD3-A54E-89CBAE2086E6},BinaryType=1,)
MSI (s) (54:B4) [16:04:29:545]: Executing op: ComponentUnregister(ComponentId={5005F009-211C-4827-8066-CE6AB3875FE5},ProductKey={D77B0D44-D35B-4BD3-A54E-89CBAE2086E6},BinaryType=1,)
MSI (s) (54:B4) [16:04:29:545]: Executing op: ComponentUnregister(ComponentId={37575D6D-DCA4-4224-B12F-83C85C223F69},ProductKey={D77B0D44-D35B-4BD3-A54E-89CBAE2086E6},BinaryType=1,)
MSI (s) (54:B4) [16:04:29:545]: Executing op: ComponentUnregister(ComponentId={9B25A363-D4EC-4A22-86D1-7E37EE2D6BDF},ProductKey={D77B0D44-D35B-4BD3-A54E-89CBAE2086E6},BinaryType=1,)
MSI (s) (54:B4) [16:04:29:545]: Executing op: ComponentUnregister(ComponentId={B3A2AF29-2D93-4F28-B7C7-53F3AE6E7CBE},ProductKey={D77B0D44-D35B-4BD3-A54E-89CBAE2086E6},BinaryType=1,)
MSI (s) (54:B4) [16:04:29:545]: Executing op: ComponentUnregister(ComponentId={67662931-22EB-45E2-9F53-66F340CCFA2C},ProductKey={D77B0D44-D35B-4BD3-A54E-89CBAE2086E6},BinaryType=1,)
MSI (s) (54:B4) [16:04:29:545]: Executing op: ComponentUnregister(ComponentId={C555C2F4-1ECA-4834-8F9A-C1D1020DF6EC},ProductKey={D77B0D44-D35B-4BD3-A54E-89CBAE2086E6},BinaryType=1,)
MSI (s) (54:B4) [16:04:29:545]: Executing op: ComponentUnregister(ComponentId={737D13FF-9750-4F79-A62F-A5931B255766},ProductKey={D77B0D44-D35B-4BD3-A54E-89CBAE2086E6},BinaryType=1,)
MSI (s) (54:B4) [16:04:29:545]: Executing op: ComponentUnregister(ComponentId={790C68F3-C492-4510-81BD-814F85F5439F},ProductKey={D77B0D44-D35B-4BD3-A54E-89CBAE2086E6},BinaryType=1,)
MSI (s) (54:B4) [16:04:29:545]: Executing op: ComponentUnregister(ComponentId={30F8BF95-1DB2-4CE8-8EBB-9F9BEF442089},ProductKey={D77B0D44-D35B-4BD3-A54E-89CBAE2086E6},BinaryType=1,)
MSI (s) (54:B4) [16:04:29:545]: Executing op: ComponentUnregister(ComponentId={A7E168FF-B8EE-4EE0-B95A-2A4BD8B12655},ProductKey={D77B0D44-D35B-4BD3-A54E-89CBAE2086E6},BinaryType=1,)
MSI (s) (54:B4) [16:04:29:545]: Executing op: ComponentUnregister(ComponentId={19AFBC3B-52C9-41DE-95FE-992FC04E0544},ProductKey={D77B0D44-D35B-4BD3-A54E-89CBAE2086E6},BinaryType=1,)
MSI (s) (54:B4) [16:04:29:545]: Executing op: ComponentUnregister(ComponentId={E10B87D2-3AA7-4492-87A1-AC8D4FD5B369},ProductKey={D77B0D44-D35B-4BD3-A54E-89CBAE2086E6},BinaryType=1,)
MSI (s) (54:B4) [16:04:29:545]: Executing op: ComponentUnregister(ComponentId={276268CF-8430-444D-8ED0-F5FB680DDA29},ProductKey={D77B0D44-D35B-4BD3-A54E-89CBAE2086E6},BinaryType=1,)
MSI (s) (54:B4) [16:04:29:545]: Executing op: ComponentUnregister(ComponentId={7966E299-DE9D-4D10-A524-58ED712D7667},ProductKey={D77B0D44-D35B-4BD3-A54E-89CBAE2086E6},BinaryType=1,)
MSI (s) (54:B4) [16:04:29:545]: Executing op: ComponentUnregister(ComponentId={056DC3F9-2223-49EE-8A6A-971B4699D24F},ProductKey={D77B0D44-D35B-4BD3-A54E-89CBAE2086E6},BinaryType=1,)
MSI (s) (54:B4) [16:04:29:545]: Executing op: ComponentUnregister(ComponentId={2CB289F3-7757-4FAC-BA95-9145B760B2BB},ProductKey={D77B0D44-D35B-4BD3-A54E-89CBAE2086E6},BinaryType=1,)
MSI (s) (54:B4) [16:04:29:561]: Executing op: ComponentUnregister(ComponentId={70AFEF9B-90CE-4B85-8447-20EB8DCADB28},ProductKey={D77B0D44-D35B-4BD3-A54E-89CBAE2086E6},BinaryType=1,)
MSI (s) (54:B4) [16:04:29:561]: Executing op: ComponentUnregister(ComponentId={ABFDFC20-2599-4433-BE08-D562ACB5100C},ProductKey={D77B0D44-D35B-4BD3-A54E-89CBAE2086E6},BinaryType=1,)
MSI (s) (54:B4) [16:04:29:561]: Executing op: ComponentUnregister(ComponentId={CB4A7932-BDD0-4C3E-9BB8-173BC6F0DADA},ProductKey={D77B0D44-D35B-4BD3-A54E-89CBAE2086E6},BinaryType=1,)
MSI (s) (54:B4) [16:04:29:561]: Executing op: ComponentUnregister(ComponentId={6E0119F3-F31D-4F3F-AF49-ED5C3CC4C64F},ProductKey={D77B0D44-D35B-4BD3-A54E-89CBAE2086E6},BinaryType=1,)
MSI (s) (54:B4) [16:04:29:561]: Executing op: ComponentUnregister(ComponentId={4C4B02A8-42B5-41EE-A8EC-5C63A8AB6603},ProductKey={D77B0D44-D35B-4BD3-A54E-89CBAE2086E6},BinaryType=1,)
MSI (s) (54:B4) [16:04:29:561]: Executing op: ComponentUnregister(ComponentId={FD8D69F4-5BFB-4C05-90A0-D01CA47833AC},ProductKey={D77B0D44-D35B-4BD3-A54E-89CBAE2086E6},BinaryType=1,)
MSI (s) (54:B4) [16:04:29:561]: Executing op: ComponentUnregister(ComponentId={B96E3E47-1E65-4047-9B5E-552791FD5FDD},ProductKey={D77B0D44-D35B-4BD3-A54E-89CBAE2086E6},BinaryType=1,)
MSI (s) (54:B4) [16:04:29:561]: Executing op: ComponentUnregister(ComponentId={16676143-7A2B-4677-9A98-18CA1CE4E430},ProductKey={D77B0D44-D35B-4BD3-A54E-89CBAE2086E6},BinaryType=1,)
MSI (s) (54:B4) [16:04:29:561]: Executing op: ComponentUnregister(ComponentId={CC9D0092-BB8C-45C5-B3F9-DD36C58F3FB3},ProductKey={D77B0D44-D35B-4BD3-A54E-89CBAE2086E6},BinaryType=1,)
MSI (s) (54:B4) [16:04:29:561]: Executing op: ComponentUnregister(ComponentId={F314E101-B3AC-4561-AA2F-D09571DE4455},ProductKey={D77B0D44-D35B-4BD3-A54E-89CBAE2086E6},BinaryType=1,)
MSI (s) (54:B4) [16:04:29:561]: Executing op: ComponentUnregister(ComponentId={8FB170A0-AD95-43F1-9089-284C3EFBF310},ProductKey={D77B0D44-D35B-4BD3-A54E-89CBAE2086E6},BinaryType=1,)
MSI (s) (54:B4) [16:04:29:561]: Executing op: ComponentUnregister(ComponentId={585336B8-53C6-4243-9634-922A09D28AEA},ProductKey={D77B0D44-D35B-4BD3-A54E-89CBAE2086E6},BinaryType=1,)
MSI (s) (54:B4) [16:04:29:561]: Executing op: ComponentUnregister(ComponentId={A5C6AA84-EE22-4D73-AFF6-2F60A0E6CCCF},ProductKey={D77B0D44-D35B-4BD3-A54E-89CBAE2086E6},BinaryType=1,)
MSI (s) (54:B4) [16:04:29:561]: Executing op: ComponentUnregister(ComponentId={EB4137FC-6E95-49AC-A08D-C02FC261B3AA},ProductKey={D77B0D44-D35B-4BD3-A54E-89CBAE2086E6},BinaryType=1,)
MSI (s) (54:B4) [16:04:29:561]: Executing op: ComponentUnregister(ComponentId={59F22E04-5AC6-4419-9CFF-E4A79F7EFDC0},ProductKey={D77B0D44-D35B-4BD3-A54E-89CBAE2086E6},BinaryType=1,)
MSI (s) (54:B4) [16:04:29:561]: Executing op: ComponentUnregister(ComponentId={1FBAA0E9-A0C4-4983-B010-7FDCDA1B5F80},ProductKey={D77B0D44-D35B-4BD3-A54E-89CBAE2086E6},BinaryType=1,)
MSI (s) (54:B4) [16:04:29:561]: Executing op: ComponentUnregister(ComponentId={5D87F470-0EF8-4092-8582-90A05E754976},ProductKey={D77B0D44-D35B-4BD3-A54E-89CBAE2086E6},BinaryType=1,)
MSI (s) (54:B4) [16:04:29:561]: Executing op: ComponentUnregister(ComponentId={43683CFD-3DDE-4D00-8BF7-BA51D8D0245D},ProductKey={D77B0D44-D35B-4BD3-A54E-89CBAE2086E6},BinaryType=1,)
MSI (s) (54:B4) [16:04:29:561]: Executing op: ComponentUnregister(ComponentId={E18C9F3E-2544-45A2-B5CA-DF9138C4C4C3},ProductKey={D77B0D44-D35B-4BD3-A54E-89CBAE2086E6},BinaryType=1,)
MSI (s) (54:B4) [16:04:29:577]: Executing op: ComponentUnregister(ComponentId={4034DE9E-3266-411C-81AB-8D6F1C2C675B},ProductKey={D77B0D44-D35B-4BD3-A54E-89CBAE2086E6},BinaryType=1,)
MSI (s) (54:B4) [16:04:29:577]: Executing op: ComponentUnregister(ComponentId={2269B35B-3794-4038-964C-C52680D8F644},ProductKey={D77B0D44-D35B-4BD3-A54E-89CBAE2086E6},BinaryType=1,)
MSI (s) (54:B4) [16:04:29:577]: Executing op: ComponentUnregister(ComponentId={7AD82923-B821-4AFE-BA35-0FF229C65385},ProductKey={D77B0D44-D35B-4BD3-A54E-89CBAE2086E6},BinaryType=1,)
MSI (s) (54:B4) [16:04:29:577]: Executing op: ComponentUnregister(ComponentId={27A62B1E-D2C5-45C4-87D8-A7A11F0E8D7E},ProductKey={D77B0D44-D35B-4BD3-A54E-89CBAE2086E6},BinaryType=1,)
MSI (s) (54:B4) [16:04:29:577]: Executing op: ComponentUnregister(ComponentId={A8E37052-2640-4F8F-A855-4EA1DC96B7C3},ProductKey={D77B0D44-D35B-4BD3-A54E-89CBAE2086E6},BinaryType=1,)
MSI (s) (54:B4) [16:04:29:577]: Executing op: ComponentUnregister(ComponentId={77082AE9-16E3-4FAF-9F60-0C4D1BA1FE0A},ProductKey={D77B0D44-D35B-4BD3-A54E-89CBAE2086E6},BinaryType=1,)
MSI (s) (54:B4) [16:04:29:577]: Executing op: ComponentUnregister(ComponentId={76A02305-B2DC-4028-886C-E940C1B5A794},ProductKey={D77B0D44-D35B-4BD3-A54E-89CBAE2086E6},BinaryType=1,)
MSI (s) (54:B4) [16:04:29:577]: Executing op: ComponentUnregister(ComponentId={36CD8D75-17E9-481B-ABC5-274837680A36},ProductKey={D77B0D44-D35B-4BD3-A54E-89CBAE2086E6},BinaryType=1,)
MSI (s) (54:B4) [16:04:29:577]: Executing op: ComponentUnregister(ComponentId={921B0181-C47A-4BB4-8E72-E0E90E880427},ProductKey={D77B0D44-D35B-4BD3-A54E-89CBAE2086E6},BinaryType=1,)
MSI (s) (54:B4) [16:04:29:577]: Executing op: ComponentUnregister(ComponentId={C25F72FF-036F-4ABA-968E-BDEC975326CA},ProductKey={D77B0D44-D35B-4BD3-A54E-89CBAE2086E6},BinaryType=1,)
MSI (s) (54:B4) [16:04:29:577]: Executing op: ComponentUnregister(ComponentId={057C87CF-C340-43D6-8080-9F8421572EA4},ProductKey={D77B0D44-D35B-4BD3-A54E-89CBAE2086E6},BinaryType=1,)
MSI (s) (54:B4) [16:04:29:577]: Executing op: ComponentUnregister(ComponentId={913206DA-4B1E-45A4-B698-7B6270159D49},ProductKey={D77B0D44-D35B-4BD3-A54E-89CBAE2086E6},BinaryType=1,)
MSI (s) (54:B4) [16:04:29:577]: Executing op: ComponentUnregister(ComponentId={52E78CB7-BA6E-422C-81DF-88C7A44AB875},ProductKey={D77B0D44-D35B-4BD3-A54E-89CBAE2086E6},BinaryType=1,)
MSI (s) (54:B4) [16:04:29:577]: Executing op: ComponentUnregister(ComponentId={A6610DAD-D379-46EA-B961-694E0D6B1C3B},ProductKey={D77B0D44-D35B-4BD3-A54E-89CBAE2086E6},BinaryType=1,)
MSI (s) (54:B4) [16:04:29:577]: Executing op: ComponentUnregister(ComponentId={03BD2DA0-3064-497A-99F2-BD96ECA5AA0E},ProductKey={D77B0D44-D35B-4BD3-A54E-89CBAE2086E6},BinaryType=1,)
MSI (s) (54:B4) [16:04:29:577]: Executing op: ComponentUnregister(ComponentId={BBD78A1F-41FA-4307-958F-B3FB28F38A8A},ProductKey={D77B0D44-D35B-4BD3-A54E-89CBAE2086E6},BinaryType=1,)
MSI (s) (54:B4) [16:04:29:577]: Executing op: ComponentUnregister(ComponentId={9FF64740-7DF9-4D45-B2A9-690FFA097F56},ProductKey={D77B0D44-D35B-4BD3-A54E-89CBAE2086E6},BinaryType=1,)
MSI (s) (54:B4) [16:04:29:577]: Executing op: ComponentUnregister(ComponentId={B87B1BBF-DE2B-47F2-8A41-7CA8BDBC6C52},ProductKey={D77B0D44-D35B-4BD3-A54E-89CBAE2086E6},BinaryType=1,)
MSI (s) (54:B4) [16:04:29:592]: Executing op: ComponentUnregister(ComponentId={4E9A1C91-EAFC-4B5F-9975-6B6AF810DF7C},ProductKey={D77B0D44-D35B-4BD3-A54E-89CBAE2086E6},BinaryType=1,)
MSI (s) (54:B4) [16:04:29:592]: Executing op: ComponentUnregister(ComponentId={743170C2-C53D-4484-BF32-A232D6951F20},ProductKey={D77B0D44-D35B-4BD3-A54E-89CBAE2086E6},BinaryType=1,)
MSI (s) (54:B4) [16:04:29:592]: Executing op: ComponentUnregister(ComponentId={A4527929-EB26-4CBF-B337-410D80775965},ProductKey={D77B0D44-D35B-4BD3-A54E-89CBAE2086E6},BinaryType=1,)
MSI (s) (54:B4) [16:04:29:592]: Executing op: ComponentUnregister(ComponentId={87D8E98F-8552-4D5C-9B27-151A08CAA775},ProductKey={D77B0D44-D35B-4BD3-A54E-89CBAE2086E6},BinaryType=1,)
MSI (s) (54:B4) [16:04:29:592]: Executing op: ComponentUnregister(ComponentId={AD425D95-3E2B-4F14-9D7E-359072F62F0C},ProductKey={D77B0D44-D35B-4BD3-A54E-89CBAE2086E6},BinaryType=1,)
MSI (s) (54:B4) [16:04:29:592]: Executing op: ComponentUnregister(ComponentId={C7600429-C56F-4EB8-9FC1-2EE5478C3950},ProductKey={D77B0D44-D35B-4BD3-A54E-89CBAE2086E6},BinaryType=1,)
MSI (s) (54:B4) [16:04:29:592]: Executing op: ComponentUnregister(ComponentId={D2CEC0DA-9DEB-4101-8FDB-216F9B822F4F},ProductKey={D77B0D44-D35B-4BD3-A54E-89CBAE2086E6},BinaryType=1,)
MSI (s) (54:B4) [16:04:29:592]: Executing op: ComponentUnregister(ComponentId={81261A43-1380-42C9-A52F-282382120F54},ProductKey={D77B0D44-D35B-4BD3-A54E-89CBAE2086E6},BinaryType=1,)
MSI (s) (54:B4) [16:04:29:592]: Executing op: ComponentUnregister(ComponentId={8BF906C2-1D48-4B42-BEA7-A57E77F875F9},ProductKey={D77B0D44-D35B-4BD3-A54E-89CBAE2086E6},BinaryType=1,)
MSI (s) (54:B4) [16:04:29:592]: Executing op: ComponentUnregister(ComponentId={7E11335C-07EE-4A9D-9DCD-DD4E1E889B19},ProductKey={D77B0D44-D35B-4BD3-A54E-89CBAE2086E6},BinaryType=1,)
MSI (s) (54:B4) [16:04:29:592]: Executing op: ComponentUnregister(ComponentId={885030E9-2A02-43F4-B74E-FBC71CF342AD},ProductKey={D77B0D44-D35B-4BD3-A54E-89CBAE2086E6},BinaryType=1,)
MSI (s) (54:B4) [16:04:29:592]: Executing op: ComponentUnregister(ComponentId={436429E1-7E15-4B5F-9D2C-19B11F3F7E3C},ProductKey={D77B0D44-D35B-4BD3-A54E-89CBAE2086E6},BinaryType=1,)
MSI (s) (54:B4) [16:04:29:592]: Executing op: ComponentUnregister(ComponentId={A8106DCC-7D3A-44F9-9BD7-16B9CC5C824E},ProductKey={D77B0D44-D35B-4BD3-A54E-89CBAE2086E6},BinaryType=1,)
MSI (s) (54:B4) [16:04:29:592]: Executing op: ComponentUnregister(ComponentId={AB68F81D-30B8-44D1-B883-AF1F17BC1EED},ProductKey={D77B0D44-D35B-4BD3-A54E-89CBAE2086E6},BinaryType=1,)
MSI (s) (54:B4) [16:04:29:592]: Executing op: ComponentUnregister(ComponentId={5A760E6D-0ECE-42D0-92AA-5D7CCCD15CAF},ProductKey={D77B0D44-D35B-4BD3-A54E-89CBAE2086E6},BinaryType=1,)
MSI (s) (54:B4) [16:04:29:592]: Executing op: ComponentUnregister(ComponentId={52BC84FA-6320-45C1-8A4F-C9B772C034BF},ProductKey={D77B0D44-D35B-4BD3-A54E-89CBAE2086E6},BinaryType=1,)
MSI (s) (54:B4) [16:04:29:592]: Executing op: ComponentUnregister(ComponentId={66D827A8-089C-499C-A7A4-095185671D00},ProductKey={D77B0D44-D35B-4BD3-A54E-89CBAE2086E6},BinaryType=1,)
MSI (s) (54:B4) [16:04:29:592]: Executing op: ComponentUnregister(ComponentId={EE8BADF5-E4AE-4E95-BC97-0E8FF763E1C9},ProductKey={D77B0D44-D35B-4BD3-A54E-89CBAE2086E6},BinaryType=1,)
MSI (s) (54:B4) [16:04:29:608]: Executing op: ComponentUnregister(ComponentId={3D30C1E0-CD66-4A37-9C56-A447F1BA6A99},ProductKey={D77B0D44-D35B-4BD3-A54E-89CBAE2086E6},BinaryType=1,)
MSI (s) (54:B4) [16:04:29:608]: Executing op: ComponentUnregister(ComponentId={B2CB3CFA-0E1E-44CC-8BC1-6F13E9B0537D},ProductKey={D77B0D44-D35B-4BD3-A54E-89CBAE2086E6},BinaryType=1,)
MSI (s) (54:B4) [16:04:29:608]: Executing op: ComponentUnregister(ComponentId={154E06B2-D55A-4461-82BA-0D1C91D71A09},ProductKey={D77B0D44-D35B-4BD3-A54E-89CBAE2086E6},BinaryType=1,)
MSI (s) (54:B4) [16:04:29:608]: Executing op: ComponentUnregister(ComponentId={A6D95A03-2DC1-4A22-B463-35F72A0DCE38},ProductKey={D77B0D44-D35B-4BD3-A54E-89CBAE2086E6},BinaryType=1,)
MSI (s) (54:B4) [16:04:29:608]: Executing op: ComponentUnregister(ComponentId={2F1CD552-21B4-4941-9691-2B1D88135D42},ProductKey={D77B0D44-D35B-4BD3-A54E-89CBAE2086E6},BinaryType=1,)
MSI (s) (54:B4) [16:04:29:608]: Executing op: ComponentUnregister(ComponentId={84BA23E5-89E1-4B5A-9EF0-4C4D54479E2C},ProductKey={D77B0D44-D35B-4BD3-A54E-89CBAE2086E6},BinaryType=1,)
MSI (s) (54:B4) [16:04:29:608]: Executing op: ComponentUnregister(ComponentId={FE35CAAA-544E-4E5A-A909-BD8483265954},ProductKey={D77B0D44-D35B-4BD3-A54E-89CBAE2086E6},BinaryType=1,)
MSI (s) (54:B4) [16:04:29:608]: Executing op: ComponentUnregister(ComponentId={A7E505C8-0714-4EE5-B5EA-E484822051F0},ProductKey={D77B0D44-D35B-4BD3-A54E-89CBAE2086E6},BinaryType=1,)
MSI (s) (54:B4) [16:04:29:608]: Executing op: ComponentUnregister(ComponentId={E3A18EDC-5539-49A0-8E58-30605DBE5B06},ProductKey={D77B0D44-D35B-4BD3-A54E-89CBAE2086E6},BinaryType=1,)
MSI (s) (54:B4) [16:04:29:608]: Executing op: ComponentUnregister(ComponentId={CBD85592-53D9-408A-9D12-78261F1F2ECD},ProductKey={D77B0D44-D35B-4BD3-A54E-89CBAE2086E6},BinaryType=1,)
MSI (s) (54:B4) [16:04:29:608]: Executing op: ComponentUnregister(ComponentId={BA814E7C-A9A6-4F8F-91E5-34667D0FC247},ProductKey={D77B0D44-D35B-4BD3-A54E-89CBAE2086E6},BinaryType=1,)
MSI (s) (54:B4) [16:04:29:608]: Executing op: ComponentUnregister(ComponentId={E9B44CE5-BA0E-4C30-A5D6-9F52D05BC618},ProductKey={D77B0D44-D35B-4BD3-A54E-89CBAE2086E6},BinaryType=1,)
MSI (s) (54:B4) [16:04:29:608]: Executing op: ComponentUnregister(ComponentId={37C55C63-F44A-40AF-99E5-38EDE658AA9A},ProductKey={D77B0D44-D35B-4BD3-A54E-89CBAE2086E6},BinaryType=1,)
MSI (s) (54:B4) [16:04:29:608]: Executing op: ComponentUnregister(ComponentId={3FF78844-5208-4EA3-B12F-1C5312F47F96},ProductKey={D77B0D44-D35B-4BD3-A54E-89CBAE2086E6},BinaryType=1,)
MSI (s) (54:B4) [16:04:29:608]: Executing op: ComponentUnregister(ComponentId={783A9018-3727-4666-9868-B3A66B0037C9},ProductKey={D77B0D44-D35B-4BD3-A54E-89CBAE2086E6},BinaryType=1,)
MSI (s) (54:B4) [16:04:29:608]: Executing op: ComponentUnregister(ComponentId={CD44DD8D-1113-470A-A04B-02C54D6D7F3A},ProductKey={D77B0D44-D35B-4BD3-A54E-89CBAE2086E6},BinaryType=1,)
MSI (s) (54:B4) [16:04:29:608]: Executing op: ComponentUnregister(ComponentId={5EC3ABE6-CD30-48B2-B81E-95A466CA8319},ProductKey={D77B0D44-D35B-4BD3-A54E-89CBAE2086E6},BinaryType=1,)
MSI (s) (54:B4) [16:04:29:608]: Executing op: ComponentUnregister(ComponentId={4D42D5C9-C6FF-44BE-A274-EEF94A1D7A33},ProductKey={D77B0D44-D35B-4BD3-A54E-89CBAE2086E6},BinaryType=1,)
MSI (s) (54:B4) [16:04:29:623]: Executing op: ComponentUnregister(ComponentId={D0A7DA41-A99A-49DF-BD2B-95DB2D821768},ProductKey={D77B0D44-D35B-4BD3-A54E-89CBAE2086E6},BinaryType=1,)
MSI (s) (54:B4) [16:04:29:623]: Executing op: ComponentUnregister(ComponentId={F7D24936-0A3E-4161-A783-2FA227D524CC},ProductKey={D77B0D44-D35B-4BD3-A54E-89CBAE2086E6},BinaryType=1,)
MSI (s) (54:B4) [16:04:29:623]: Executing op: ComponentUnregister(ComponentId={547DDEF0-C33D-4BD4-9DAF-E682097A7357},ProductKey={D77B0D44-D35B-4BD3-A54E-89CBAE2086E6},BinaryType=1,)
MSI (s) (54:B4) [16:04:29:623]: Executing op: ComponentUnregister(ComponentId={CD1A723A-621B-4E54-B582-4720007EBF48},ProductKey={D77B0D44-D35B-4BD3-A54E-89CBAE2086E6},BinaryType=1,)
MSI (s) (54:B4) [16:04:29:623]: Executing op: ComponentUnregister(ComponentId={F0B99991-22CA-46D4-82FE-92750C3838A3},ProductKey={D77B0D44-D35B-4BD3-A54E-89CBAE2086E6},BinaryType=1,)
MSI (s) (54:B4) [16:04:29:623]: Executing op: ComponentUnregister(ComponentId={567BD974-D453-4FC7-96B5-F7A6A10416C6},ProductKey={D77B0D44-D35B-4BD3-A54E-89CBAE2086E6},BinaryType=1,)
MSI (s) (54:B4) [16:04:29:623]: Executing op: ComponentUnregister(ComponentId={C4E770DB-11B7-4173-B47B-FD9842717120},ProductKey={D77B0D44-D35B-4BD3-A54E-89CBAE2086E6},BinaryType=1,)
MSI (s) (54:B4) [16:04:29:623]: Executing op: ComponentUnregister(ComponentId={66572B30-3550-4247-BE8F-33030C62C895},ProductKey={D77B0D44-D35B-4BD3-A54E-89CBAE2086E6},BinaryType=1,)
MSI (s) (54:B4) [16:04:29:623]: Executing op: ComponentUnregister(ComponentId={C32DA926-4533-4214-B26C-9E91B3E37E45},ProductKey={D77B0D44-D35B-4BD3-A54E-89CBAE2086E6},BinaryType=1,)
MSI (s) (54:B4) [16:04:29:623]: Executing op: ComponentUnregister(ComponentId={B2CB61A6-8466-42F3-8277-04FBED28B18D},ProductKey={D77B0D44-D35B-4BD3-A54E-89CBAE2086E6},BinaryType=1,)
MSI (s) (54:B4) [16:04:29:623]: Executing op: ComponentUnregister(ComponentId={62937E61-3B89-4957-8F7F-F41BE9BB655B},ProductKey={D77B0D44-D35B-4BD3-A54E-89CBAE2086E6},BinaryType=1,)
MSI (s) (54:B4) [16:04:29:623]: Executing op: ComponentUnregister(ComponentId={0072A5BC-392B-4568-80BB-D2FC2083F06A},ProductKey={D77B0D44-D35B-4BD3-A54E-89CBAE2086E6},BinaryType=1,)
MSI (s) (54:B4) [16:04:29:623]: Executing op: ComponentUnregister(ComponentId={9D53BFFE-246E-4299-9438-D7254419E124},ProductKey={D77B0D44-D35B-4BD3-A54E-89CBAE2086E6},BinaryType=1,)
MSI (s) (54:B4) [16:04:29:623]: Executing op: ComponentUnregister(ComponentId={8A614382-D7B8-4C4B-B72C-54D155B42D7A},ProductKey={D77B0D44-D35B-4BD3-A54E-89CBAE2086E6},BinaryType=1,)
MSI (s) (54:B4) [16:04:29:623]: Executing op: ComponentUnregister(ComponentId={D341BB6B-284E-49C3-AA68-B827D1E538D7},ProductKey={D77B0D44-D35B-4BD3-A54E-89CBAE2086E6},BinaryType=1,)
MSI (s) (54:B4) [16:04:29:623]: Executing op: ComponentUnregister(ComponentId={3701C3AC-45FB-4FB1-86FA-86F090EC6729},ProductKey={D77B0D44-D35B-4BD3-A54E-89CBAE2086E6},BinaryType=1,)
MSI (s) (54:B4) [16:04:29:623]: Executing op: ComponentUnregister(ComponentId={90A99965-3791-45CE-ACA7-405AFA977D63},ProductKey={D77B0D44-D35B-4BD3-A54E-89CBAE2086E6},BinaryType=1,)
MSI (s) (54:B4) [16:04:29:623]: Executing op: ComponentUnregister(ComponentId={BCDB8480-A21C-41D3-A5C8-2086FC7D0162},ProductKey={D77B0D44-D35B-4BD3-A54E-89CBAE2086E6},BinaryType=1,)
MSI (s) (54:B4) [16:04:29:623]: Executing op: ComponentUnregister(ComponentId={1C5D6E34-87A5-4B08-A42D-F8C69748BF2B},ProductKey={D77B0D44-D35B-4BD3-A54E-89CBAE2086E6},BinaryType=1,)
MSI (s) (54:B4) [16:04:29:639]: Executing op: ComponentUnregister(ComponentId={A13700BF-93FF-481A-A6F0-DFC5D3FEBFF6},ProductKey={D77B0D44-D35B-4BD3-A54E-89CBAE2086E6},BinaryType=1,)
MSI (s) (54:B4) [16:04:29:639]: Executing op: ComponentUnregister(ComponentId={99AD84EB-CD1B-4F4B-8E91-D4D184C90C5C},ProductKey={D77B0D44-D35B-4BD3-A54E-89CBAE2086E6},BinaryType=1,)
MSI (s) (54:B4) [16:04:29:639]: Executing op: ComponentUnregister(ComponentId={F5F5982A-762D-4985-9913-39684CFD45F5},ProductKey={D77B0D44-D35B-4BD3-A54E-89CBAE2086E6},BinaryType=1,)
MSI (s) (54:B4) [16:04:29:639]: Executing op: ComponentUnregister(ComponentId={2593CAEC-B7D3-45D1-BF95-EB72A770E1A1},ProductKey={D77B0D44-D35B-4BD3-A54E-89CBAE2086E6},BinaryType=1,)
MSI (s) (54:B4) [16:04:29:639]: Executing op: ComponentUnregister(ComponentId={031D8A86-F0CB-4DDF-B00E-57374C639292},ProductKey={D77B0D44-D35B-4BD3-A54E-89CBAE2086E6},BinaryType=1,)
MSI (s) (54:B4) [16:04:29:639]: Executing op: ComponentUnregister(ComponentId={24BEDC24-2D89-4641-9BE1-DE14E900FF81},ProductKey={D77B0D44-D35B-4BD3-A54E-89CBAE2086E6},BinaryType=1,)
MSI (s) (54:B4) [16:04:29:639]: Executing op: ComponentUnregister(ComponentId={92320FC2-59AF-4066-A69F-6A9FF95C6638},ProductKey={D77B0D44-D35B-4BD3-A54E-89CBAE2086E6},BinaryType=1,)
MSI (s) (54:B4) [16:04:29:639]: Executing op: ComponentUnregister(ComponentId={9B270D9B-D8CC-4437-996B-15D6996945EF},ProductKey={D77B0D44-D35B-4BD3-A54E-89CBAE2086E6},BinaryType=1,)
MSI (s) (54:B4) [16:04:29:639]: Executing op: ComponentUnregister(ComponentId={99F494DD-187B-4C4F-B794-D10EC84649F9},ProductKey={D77B0D44-D35B-4BD3-A54E-89CBAE2086E6},BinaryType=1,)
MSI (s) (54:B4) [16:04:29:639]: Executing op: ComponentUnregister(ComponentId={D835A2C7-2E4A-46B3-B8BD-ABA6F3715A54},ProductKey={D77B0D44-D35B-4BD3-A54E-89CBAE2086E6},BinaryType=1,)
MSI (s) (54:B4) [16:04:29:639]: Executing op: ComponentUnregister(ComponentId={2189ABF4-59CD-41E6-80F8-565993C7B90A},ProductKey={D77B0D44-D35B-4BD3-A54E-89CBAE2086E6},BinaryType=1,)
MSI (s) (54:B4) [16:04:29:639]: Executing op: ComponentUnregister(ComponentId={9D30A491-8A6B-4931-9095-959C97C90E91},ProductKey={D77B0D44-D35B-4BD3-A54E-89CBAE2086E6},BinaryType=1,)
MSI (s) (54:B4) [16:04:29:639]: Executing op: ComponentUnregister(ComponentId={49754B66-727F-4546-8FA9-EB7B2623D35F},ProductKey={D77B0D44-D35B-4BD3-A54E-89CBAE2086E6},BinaryType=1,)
MSI (s) (54:B4) [16:04:29:639]: Executing op: End(Checksum=0,ProgressTotalHDWord=0,ProgressTotalLDWord=0)
MSI (s) (54:B4) [16:04:29:639]: Error in rollback skipped. Return: 5
MSI (s) (54:B4) [16:04:29:655]: Note: 1: 2318 2:
MSI (s) (54:B4) [16:04:29:655]: No System Restore sequence number for this installation.
MSI (s) (54:B4) [16:04:29:655]: Unlocking Server
MSI (s) (54:B4) [16:04:29:655]: PROPERTY CHANGE: Deleting UpdateStarted property. Its current value is '1'.
Action ended 16:04:29: INSTALL. Return value 3.
Property(S): UpgradeCode = {64B13631-6664-4F23-AFE2-98FCE86920BD}
Property(S): SET_ADMIN_USER = 1
Property(S): INSTALLDIR = C:\Program Files\SplunkUniversalForwarder\
Property(S): dirA5528701EE26FFBF346CCE20EE8ACE99 = C:\Program Files\SplunkUniversalForwarder\bin\
Property(S): dirE99B67BA83CA9B283DA87308D2AB32C0 = C:\Program Files\SplunkUniversalForwarder\bin\scripts\
Property(S): dir3E02976F57563947ADB6A8038DF4FCEF = C:\Program Files\SplunkUniversalForwarder\etc\
Property(S): dirFB7FAFCA28F7419DE35973B35C5D283E = C:\Program Files\SplunkUniversalForwarder\etc\apps\introspection_generator_addon\bin\
Property(S): dirA4925C017BDFD103F37D0BDE702E9C43 = C:\Program Files\SplunkUniversalForwarder\etc\apps\introspection_generator_addon\default\
Property(S): dir7C2F815EE2C9E7DBE85066CF5B056987 = C:\Program Files\SplunkUniversalForwarder\etc\apps\learned\default\
Property(S): dir28F70AA0D15CA730061DB84FFE88D805 = C:\Program Files\SplunkUniversalForwarder\etc\apps\learned\metadata\
Property(S): dir0ABBB45398994B5C89841ED05851776C = C:\Program Files\SplunkUniversalForwarder\etc\apps\search\default\
Property(S): dir05B2167CF0ED7EFD2AD93158875F568C = C:\Program Files\SplunkUniversalForwarder\etc\apps\search\lookups\
Property(S): dir66FC566CEF189328CCCC8589311D2503 = C:\Program Files\SplunkUniversalForwarder\etc\apps\search\metadata\
Property(S): dir2D2122E4CFDE8C263EEE7452554D6DA2 = C:\Program Files\SplunkUniversalForwarder\etc\apps\SplunkUniversalForwarder\default\
Property(S): dirF389DCA026B8D0A2E829970DE12F66F0 = C:\Program Files\SplunkUniversalForwarder\etc\apps\SplunkUniversalForwarder\metadata\
Property(S): dir2A81299A0652E91159BE1994DD92316A = C:\Program Files\SplunkUniversalForwarder\etc\auth\
Property(S): dir67189055EBCF5D1437F0A9D30368ED9C = C:\Program Files\SplunkUniversalForwarder\etc\deployment-apps\
Property(S): dirA6241AC9F2CFDD1D7D4327FB5A124C92 = C:\Program Files\SplunkUniversalForwarder\etc\disabled-apps\
Property(S): dir3F2ED1881D5C561B698B737D96419537 = C:\Program Files\SplunkUniversalForwarder\etc\modules\input\exec\
Property(S): dir3C58D8B9DB7081CC9C009A2FA233FFFD = C:\Program Files\SplunkUniversalForwarder\etc\modules\input\fschangemanager\
Property(S): dir623F2857FD6CE56C0C7472F3CF4B157E = C:\Program Files\SplunkUniversalForwarder\etc\modules\input\structuredparsing\
Property(S): dirAAE2EA6FF6BFF3615E0F6ECB4F8B8317 = C:\Program Files\SplunkUniversalForwarder\etc\modules\input\tailfile\
Property(S): dir40C5047ABE9F85BC416CF37384338C22 = C:\Program Files\SplunkUniversalForwarder\etc\modules\input\TCP\
Property(S): dir500C5AB468B41B12914CAFC92914BB04 = C:\Program Files\SplunkUniversalForwarder\etc\modules\input\UDP\
Property(S): dir350E86D3D8394619D5C56BE268AB8C03 = C:\Program Files\SplunkUniversalForwarder\etc\modules\input\wineventlog\
Property(S): dir08A71AA8240CE634F2916BD8FD86AE9D = C:\Program Files\SplunkUniversalForwarder\etc\modules\input\winparsing\
Property(S): dir36980B38D75840D0DF3C22965AFE352F = C:\Program Files\SplunkUniversalForwarder\etc\modules\parsing\
Property(S): dirEA4E77DDDE1ED87692CD92A2F7477FDA = C:\Program Files\SplunkUniversalForwarder\etc\myinstall\
Property(S): dir62FE35BBE7BD45CAEAB9D4261B2C1DA9 = C:\Program Files\SplunkUniversalForwarder\etc\shcluster\apps\
Property(S): dir7A9E1C63375946BEF53B8BCD2F9EB32B = C:\Program Files\SplunkUniversalForwarder\etc\shcluster\users\
Property(S): dir5320F257A67DB36A4CED85E00FC63DD0 = C:\Program Files\SplunkUniversalForwarder\etc\system\bin\
Property(S): dirBAC85229BB4A3494F5ECCB42AA1B824B = C:\Program Files\SplunkUniversalForwarder\etc\system\default\
Property(S): dirD3351CCE95594E87E2CC36C1024B5B4C = C:\Program Files\SplunkUniversalForwarder\etc\system\local\
Property(S): dir858D19BEE324185B277CA79FFC48EDEE = C:\Program Files\SplunkUniversalForwarder\etc\system\metadata\
Property(S): dir5083584ADFC4261D3780F7B66CB3B7B3 = C:\Program Files\SplunkUniversalForwarder\etc\system\README\
Property(S): dir087F918F10A120B6907E2460F0868A49 = C:\Program Files\SplunkUniversalForwarder\etc\system\static\
Property(S): dirCC4BF51C3FB0120CE9B785729700549B = C:\Program Files\SplunkUniversalForwarder\lib\
Property(S): dir9777D8246D1EFF4BCE1BBB3725F54761 = C:\Program Files\SplunkUniversalForwarder\share\
Property(S): dirD3369B4CFA7BF6DCB57584A7F452CA0A = C:\Program Files\SplunkUniversalForwarder\share\splunk\
Property(S): dir9DF6D6597089BA01028EE58CBBF75736 = C:\Program Files\SplunkUniversalForwarder\share\splunk\3rdparty\
Property(S): WixUIRMOption = UseRM
Property(S): _UICertFile = UICertFile
Property(S): _UIRootCertFile = UIRootCertFile
Property(S): _UIMonPath = UIMonPath
Property(S): UIUseLocalSystem = 1
Property(S): UIUseBundledTA = 1
Property(S): _UIWinTAPath = UIWinTAPath
Property(S): WIXUI_INSTALLDIR = INSTALLDIR
Property(S): ALLUSERS = 1
Property(S): ARPNOMODIFY = yes
Property(S): ARPINSTALLLOCATION = C:\Program Files\SplunkUniversalForwarder\
Property(S): InstallRegmonDrv = SplunkHome=C:\Program Files\SplunkUniversalForwarder\;LEGACYDRV=1;FailCA=
Property(S): InstallNetmonDrv = SplunkHome=C:\Program Files\SplunkUniversalForwarder\;LEGACYDRV=1;FailCA=
Property(S): InstallNohandleDrv = SplunkHome=C:\Program Files\SplunkUniversalForwarder\;LEGACYDRV=1;FailCA=
Property(S): CreateFtr = SplunkHome=C:\Program Files\SplunkUniversalForwarder\;FailCA=
Property(S): FirstTimeRun = SplunkHome=C:\Program Files\SplunkUniversalForwarder\;FailCA=
Property(S): SetSplunkLaunchConf = SplunkHome=C:\Program Files\SplunkUniversalForwarder\;SplunkSvcName=SplunkForwarder;FailCA=
Property(S): InstallSplunkService = SplunkHome=C:\Program Files\SplunkUniversalForwarder\;SplunkSvcName=SplunkForwarder;PrevProdCode=;FailCA=
Property(S): SetAcls = SplunkHome=C:\Program Files\SplunkUniversalForwarder\;FailCA=
Property(S): EnableSplunkForwarder = SplunkHome=C:\Program Files\SplunkUniversalForwarder\;FailCA=
Property(S): AddReceivingIndexer = SplunkHome=C:\Program Files\SplunkUniversalForwarder\;ReceivingIndexer=172.16.1.103:9997;FailCA=
Property(S): EnableEventLogs = SplunkHome=C:\Program Files\SplunkUniversalForwarder\;App=; Sec=; Sys=;Fwd=; Set=;FailCA=
Property(S): EnableDeploymentServer = SplunkHome=C:\Program Files\SplunkUniversalForwarder\;DeploymentServer=172.16.1.103:8089;FailCA=
Property(S): StartSplunkService = SplunkHome=C:\Program Files\SplunkUniversalForwarder\;SplunkSvcName=SplunkForwarder;LaunchSplunk=1;FailCA=
Property(S): RollbackRegmonDrv = SplunkHome=C:\Program Files\SplunkUniversalForwarder\;FailCA=
Property(S): RollbackNetmonDrv = SplunkHome=C:\Program Files\SplunkUniversalForwarder\;FailCA=
Property(S): RollbackNohandleDrv = SplunkHome=C:\Program Files\SplunkUniversalForwarder\;FailCA=
Property(S): RollbackSplunkService = SplunkHome=C:\Program Files\SplunkUniversalForwarder\;SplunkSvcName=SplunkForwarder;FailCA=
Property(S): ProgramFiles64Folder = C:\Program Files\
Property(S): TARGETDIR = D:\
Property(S): SourceDir = D:\Install\
Property(S): dirFB744D04EDFDCD8AF58A1449ABBAD45F = C:\Program Files\SplunkUniversalForwarder\etc\apps\introspection_generator_addon\
Property(S): dirB06939592AE1B7F84A5F1802888016F6 = C:\Program Files\SplunkUniversalForwarder\etc\apps\
Property(S): dir1ACCD951EA5C77FB92B36E8AB9382509 = C:\Program Files\SplunkUniversalForwarder\etc\apps\learned\
Property(S): dir302A0E4D0E8A28D4161D5640B55896DC = C:\Program Files\SplunkUniversalForwarder\etc\apps\search\
Property(S): dir060491FD1B1F02D6FE725F0B7611F71E = C:\Program Files\SplunkUniversalForwarder\etc\apps\SplunkUniversalForwarder\
Property(S): dir4B3ADB252806E43AB420F8399AC61D45 = C:\Program Files\SplunkUniversalForwarder\etc\modules\input\
Property(S): dir613AD2632481811E0F84C80F31F4CD56 = C:\Program Files\SplunkUniversalForwarder\etc\modules\
Property(S): dir6EEC3061DFBF56B9D6D2F8CBEC90FE26 = C:\Program Files\SplunkUniversalForwarder\etc\shcluster\
Property(S): dirCFB1DCA36329665F066AABF5013AECA9 = C:\Program Files\SplunkUniversalForwarder\etc\system\
Property(S): Manufacturer = Splunk, Inc.
Property(S): ProductCode = {D77B0D44-D35B-4BD3-A54E-89CBAE2086E6}
Property(S): ProductLanguage = 1033
Property(S): ProductName = UniversalForwarder
Property(S): ProductVersion = 6.2.2.255606
Property(S): ARPPRODUCTICON = WixSplunkIcon
Property(S): DefaultUIFont = WixUI_Font_Normal
Property(S): WixUI_Mode = InstallDir
Property(S): ErrorDialog = ErrorDlg
Property(S): SplunkSvcName = SplunkForwarder
Property(S): UIShowTADialog = 0
Property(S): UIRecvIdxValid = 0
Property(S): DoNotInstallDrivers = 0
Property(S): SplunkX86Msi = 0
Property(S): UICustomize = 0
Property(S): AGREETOLICENSE = Yes
Property(S): LAUNCHSPLUNK = 1
Property(S): os_OK = 1
Property(S): MSIRESTARTMANAGERCONTROL = Disable
Property(S): MSIDISABLERMRESTART = 1
Property(S): MSIRMSHUTDOWN = 2
Property(S): LEGACYDRV = 1
Property(S): AdminProperties = AGREETOLICENSE;CERTFILE;CERTPASSWORD;CLONEPREP;DEPLOYMENT_SERVER;DoNotInstallDrivers;ENABLEADMON;FAILCA;FORCEINSTALLDRIVERS;KEEPSPLUNKHOME;LAUNCHSPLUNK;LEGACYDRV;LOGON_PASSWORD;LOGON_USERNAME;MONITOR_PATH;NEWERVERSIONDETECTED;os_OK;OtherSplunkProductsPresent;PERFMON;PREVPRODUCTCODE;RECEIVING_INDEXER;ROOTCACERTFILE;SET_ADMIN_USER;SPLUNKD_PORT;UIAdmon;UIApplicationLog;UICertFile;UICertPassword;UIConfirmCertPassword;UIConfirmDomainPassword;UIDeplSrv;UIDeplSrvPort;UIDomainAccount;UIDomainPassword;UIForwardedEventsLog;UIMonPath;UINoDeplSrvOrIndexer;UIPerfCpu;UIPerfDisk;UIPerfMemory;UIPerfNetstat;UIRecvIdx;UIRecvIdxPort;UIRootCertFile;UISecurityLog;UISetupLog;UISystemLog;UIWinTAPath;WINDOWS_TA_LOCATION;WINDOWS_TA_VERSION;WINEVENTLOG_APP_ENABLE;WINEVENTLOG_FWD_ENABLE;WINEVENTLOG_SEC_ENABLE;WINEVENTLOG_SET_ENABLE;WINEVENTLOG_SYS_ENABLE
Property(S): SecureCustomProperties = ARPNOMODIFY;NEWERVERSIONDETECTED;PREVPRODUCTCODE
Property(S): MsiHiddenProperties = LOGON_PASSWORD;SetupServiceConfig
Property(S): MsiLogFileLocation = C:\Users\jjb01\AppData\Local\Temp\3\MSIda742.LOG
Property(S): PackageCode = {1586EC18-33AD-4646-B29D-F56E77D62B32}
Property(S): ProductState = -1
Property(S): PackagecodeChanging = 1
Property(S): CURRENTDIRECTORY = D:\Install
Property(S): CLIENTUILEVEL = 0
Property(S): CLIENTPROCESSID = 9560
Property(S): USERNAME = Windows User
Property(S): VersionDatabase = 200
Property(S): ACTION = INSTALL
Property(S): EXECUTEACTION = INSTALL
Property(S): ROOTDRIVE = D:\
Property(S): INSTALLLEVEL = 1
Property(S): SECONDSEQUENCE = 1
Property(S): WIXUI_INSTALLDIR_VALID = 1
Property(S): DEPLOYMENT_SERVER = 172.16.1.103:8089
Property(S): RECEIVING_INDEXER = 172.16.1.103:9997
Property(S): ADDLOCAL = Complete
Property(S): VersionMsi = 5.00
Property(S): VersionNT = 603
Property(S): VersionNT64 = 603
Property(S): WindowsBuild = 9600
Property(S): ServicePackLevel = 0
Property(S): ServicePackLevelMinor = 0
Property(S): MsiNTProductType = 3
Property(S): MsiNTSuiteDataCenter = 1
Property(S): WindowsFolder = C:\Windows\
Property(S): WindowsVolume = C:\
Property(S): System64Folder = C:\Windows\system32\
Property(S): SystemFolder = C:\Windows\SysWOW64\
Property(S): RemoteAdminTS = 1
Property(S): TempFolder = C:\Users\jjb01\AppData\Local\Temp\
Property(S): ProgramFilesFolder = C:\Program Files (x86)\
Property(S): CommonFilesFolder = C:\Program Files (x86)\Common Files\
Property(S): CommonFiles64Folder = C:\Program Files\Common Files\
Property(S): AppDataFolder = C:\Users\jjb01\AppData\Roaming\
Property(S): FavoritesFolder = C:\Users\jjb01\Favorites\
Property(S): NetHoodFolder = C:\Users\jjb01\AppData\Roaming\Microsoft\Windows\Network Shortcuts\
Property(S): PersonalFolder = C:\Users\jjb01\Documents\
Property(S): PrintHoodFolder = C:\Users\jjb01\AppData\Roaming\Microsoft\Windows\Printer Shortcuts\
Property(S): RecentFolder = C:\Users\jjb01\AppData\Roaming\Microsoft\Windows\Recent\
Property(S): SendToFolder = C:\Users\jjb01\AppData\Roaming\Microsoft\Windows\SendTo\
Property(S): TemplateFolder = C:\ProgramData\Microsoft\Windows\Templates\
Property(S): CommonAppDataFolder = C:\ProgramData\
Property(S): LocalAppDataFolder = C:\Users\jjb01\AppData\Local\
Property(S): MyPicturesFolder = C:\Users\jjb01\Pictures\
Property(S): AdminToolsFolder = C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\
Property(S): StartupFolder = C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\
Property(S): ProgramMenuFolder = C:\ProgramData\Microsoft\Windows\Start Menu\Programs\
Property(S): StartMenuFolder = C:\ProgramData\Microsoft\Windows\Start Menu\
Property(S): DesktopFolder = C:\Users\Public\Desktop\
Property(S): FontsFolder = C:\Windows\Fonts\
Property(S): GPTSupport = 1
Property(S): OLEAdvtSupport = 1
Property(S): ShellAdvtSupport = 1
Property(S): MsiAMD64 = 6
Property(S): Msix64 = 6
Property(S): Intel = 6
Property(S): PhysicalMemory = 32689
Property(S): VirtualMemory = 13464
Property(S): LogonUser = jjb01
Property(S): UserSID = S-1-5-21-2831220176-3201806128-1925276611-1173
Property(S): UserLanguageID = 2057
Property(S): ComputerName = RS002016
Property(S): SystemLanguageID = 2057
Property(S): ScreenX = 1024
Property(S): ScreenY = 768
Property(S): CaptionHeight = 23
Property(S): BorderTop = 1
Property(S): BorderSide = 1
Property(S): TextHeight = 16
Property(S): TextInternalLeading = 3
Property(S): ColorBits = 32
Property(S): TTCSupport = 1
Property(S): Time = 16:04:29
Property(S): Date = 22/04/2015
Property(S): MsiNetAssemblySupport = 4.0.30319.33440
Property(S): MsiWin32AssemblySupport = 6.3.9600.17415
Property(S): RedirectedDllSupport = 2
Property(S): AdminUser = 1
Property(S): MsiRunningElevated = 1
Property(S): Privileged = 1
Property(S): DATABASE = C:\Windows\Installer\2a7a5cfb.msi
Property(S): OriginalDatabase = D:\Install\splunkforwarder-6.2.2-255606-x64-release.msi
Property(S): UILevel = 5
Property(S): Preselected = 1
Property(S): CostingComplete = 1
Property(S): OutOfDiskSpace = 0
Property(S): OutOfNoRbDiskSpace = 0
Property(S): PrimaryVolumeSpaceAvailable = 0
Property(S): PrimaryVolumeSpaceRequired = 0
Property(S): PrimaryVolumeSpaceRemaining = 0
Property(S): SOURCEDIR = D:\Install\
Property(S): SourcedirProduct = {D77B0D44-D35B-4BD3-A54E-89CBAE2086E6}
Property(S): ProductToBeRegistered = 1
MSI (s) (54:B4) [16:04:29:670]: Closing MSIHANDLE (61) of type 790542 for thread 9652
MSI (s) (54:B4) [16:04:29:686]: MainEngineThread is returning 1603
MSI (s) (54:C0) [16:04:29:686]: No System Restore sequence number for this installation.
MSI (s) (54:C0) [16:04:29:686]: User policy value 'DisableRollback' is 0
MSI (s) (54:C0) [16:04:29:686]: Machine policy value 'DisableRollback' is 0
MSI (s) (54:C0) [16:04:29:686]: Incrementing counter to disable shutdown. Counter after increment: 0
MSI (s) (54:C0) [16:04:29:686]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\Rollback\Scripts 3: 2
MSI (s) (54:C0) [16:04:29:686]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\Rollback\Scripts 3: 2
MSI (s) (54:C0) [16:04:29:686]: Decrementing counter to disable shutdown. If counter >= 0, shutdown will be denied. Counter after decrement: -1
MSI (s) (54:C0) [16:04:29:686]: Destroying RemoteAPI object.
MSI (s) (54:74) [16:04:29:686]: Custom Action Manager thread ending.
MSI (c) (58:08) [16:04:29:686]: Back from server. Return value: 1603
MSI (c) (58:08) [16:04:29:686]: Decrementing counter to disable shutdown. If counter >= 0, shutdown will be denied. Counter after decrement: -1
MSI (c) (58:08) [16:04:29:686]: PROPERTY CHANGE: Deleting SECONDSEQUENCE property. Its current value is '1'.
Action ended 16:04:29: ExecuteAction. Return value 3.
MSI (c) (58:08) [16:04:29:686]: Doing action: FatalError
MSI (c) (58:08) [16:04:29:686]: Note: 1: 2205 2: 3: ActionText
Action 16:04:29: FatalError.
Action start 16:04:29: FatalError.
Action 16:04:29: FatalError. Dialog created
Action ended 16:04:30: FatalError. Return value 2.
Action ended 16:04:30: INSTALL. Return value 3.
MSI (c) (58:08) [16:04:30:451]: Destroying RemoteAPI object.
MSI (c) (58:E8) [16:04:30:451]: Custom Action Manager thread ending.
Property(C): UpgradeCode = {64B13631-6664-4F23-AFE2-98FCE86920BD}
Property(C): SET_ADMIN_USER = 1
Property(C): UILicenseAgreement = 1
Property(C): INSTALLDIR = C:\Program Files\SplunkUniversalForwarder\
Property(C): dirA5528701EE26FFBF346CCE20EE8ACE99 = C:\Program Files\SplunkUniversalForwarder\bin\
Property(C): dirE99B67BA83CA9B283DA87308D2AB32C0 = C:\Program Files\SplunkUniversalForwarder\bin\scripts\
Property(C): dir3E02976F57563947ADB6A8038DF4FCEF = C:\Program Files\SplunkUniversalForwarder\etc\
Property(C): dirFB7FAFCA28F7419DE35973B35C5D283E = C:\Program Files\SplunkUniversalForwarder\etc\apps\introspection_generator_addon\bin\
Property(C): dirA4925C017BDFD103F37D0BDE702E9C43 = C:\Program Files\SplunkUniversalForwarder\etc\apps\introspection_generator_addon\default\
Property(C): dir7C2F815EE2C9E7DBE85066CF5B056987 = C:\Program Files\SplunkUniversalForwarder\etc\apps\learned\default\
Property(C): dir28F70AA0D15CA730061DB84FFE88D805 = C:\Program Files\SplunkUniversalForwarder\etc\apps\learned\metadata\
Property(C): dir0ABBB45398994B5C89841ED05851776C = C:\Program Files\SplunkUniversalForwarder\etc\apps\search\default\
Property(C): dir05B2167CF0ED7EFD2AD93158875F568C = C:\Program Files\SplunkUniversalForwarder\etc\apps\search\lookups\
Property(C): dir66FC566CEF189328CCCC8589311D2503 = C:\Program Files\SplunkUniversalForwarder\etc\apps\search\metadata\
Property(C): dir2D2122E4CFDE8C263EEE7452554D6DA2 = C:\Program Files\SplunkUniversalForwarder\etc\apps\SplunkUniversalForwarder\default\
Property(C): dirF389DCA026B8D0A2E829970DE12F66F0 = C:\Program Files\SplunkUniversalForwarder\etc\apps\SplunkUniversalForwarder\metadata\
Property(C): dir2A81299A0652E91159BE1994DD92316A = C:\Program Files\SplunkUniversalForwarder\etc\auth\
Property(C): dir67189055EBCF5D1437F0A9D30368ED9C = C:\Program Files\SplunkUniversalForwarder\etc\deployment-apps\
Property(C): dirA6241AC9F2CFDD1D7D4327FB5A124C92 = C:\Program Files\SplunkUniversalForwarder\etc\disabled-apps\
Property(C): dir3F2ED1881D5C561B698B737D96419537 = C:\Program Files\SplunkUniversalForwarder\etc\modules\input\exec\
Property(C): dir3C58D8B9DB7081CC9C009A2FA233FFFD = C:\Program Files\SplunkUniversalForwarder\etc\modules\input\fschangemanager\
Property(C): dir623F2857FD6CE56C0C7472F3CF4B157E = C:\Program Files\SplunkUniversalForwarder\etc\modules\input\structuredparsing\
Property(C): dirAAE2EA6FF6BFF3615E0F6ECB4F8B8317 = C:\Program Files\SplunkUniversalForwarder\etc\modules\input\tailfile\
Property(C): dir40C5047ABE9F85BC416CF37384338C22 = C:\Program Files\SplunkUniversalForwarder\etc\modules\input\TCP\
Property(C): dir500C5AB468B41B12914CAFC92914BB04 = C:\Program Files\SplunkUniversalForwarder\etc\modules\input\UDP\
Property(C): dir350E86D3D8394619D5C56BE268AB8C03 = C:\Program Files\SplunkUniversalForwarder\etc\modules\input\wineventlog\
Property(C): dir08A71AA8240CE634F2916BD8FD86AE9D = C:\Program Files\SplunkUniversalForwarder\etc\modules\input\winparsing\
Property(C): dir36980B38D75840D0DF3C22965AFE352F = C:\Program Files\SplunkUniversalForwarder\etc\modules\parsing\
Property(C): dirEA4E77DDDE1ED87692CD92A2F7477FDA = C:\Program Files\SplunkUniversalForwarder\etc\myinstall\
Property(C): dir62FE35BBE7BD45CAEAB9D4261B2C1DA9 = C:\Program Files\SplunkUniversalForwarder\etc\shcluster\apps\
Property(C): dir7A9E1C63375946BEF53B8BCD2F9EB32B = C:\Program Files\SplunkUniversalForwarder\etc\shcluster\users\
Property(C): dir5320F257A67DB36A4CED85E00FC63DD0 = C:\Program Files\SplunkUniversalForwarder\etc\system\bin\
Property(C): dirBAC85229BB4A3494F5ECCB42AA1B824B = C:\Program Files\SplunkUniversalForwarder\etc\system\default\
Property(C): dirD3351CCE95594E87E2CC36C1024B5B4C = C:\Program Files\SplunkUniversalForwarder\etc\system\local\
Property(C): dir858D19BEE324185B277CA79FFC48EDEE = C:\Program Files\SplunkUniversalForwarder\etc\system\metadata\
Property(C): dir5083584ADFC4261D3780F7B66CB3B7B3 = C:\Program Files\SplunkUniversalForwarder\etc\system\README\
Property(C): dir087F918F10A120B6907E2460F0868A49 = C:\Program Files\SplunkUniversalForwarder\etc\system\static\
Property(C): dirCC4BF51C3FB0120CE9B785729700549B = C:\Program Files\SplunkUniversalForwarder\lib\
Property(C): dir9777D8246D1EFF4BCE1BBB3725F54761 = C:\Program Files\SplunkUniversalForwarder\share\
Property(C): dirD3369B4CFA7BF6DCB57584A7F452CA0A = C:\Program Files\SplunkUniversalForwarder\share\splunk\
Property(C): dir9DF6D6597089BA01028EE58CBBF75736 = C:\Program Files\SplunkUniversalForwarder\share\splunk\3rdparty\
Property(C): WixUIRMOption = UseRM
Property(C): UIDeplSrvPort = 8089
Property(C): UIDeplSrv = 172.16.1.103
Property(C): UIRecvIdxPort = 9997
Property(C): UIRecvIdx = 172.16.1.103
Property(C): _UICertFile = UICertFile
Property(C): _UIRootCertFile = UIRootCertFile
Property(C): _UIMonPath = UIMonPath
Property(C): UIUseLocalSystem = 1
Property(C): UIUseBundledTA = 1
Property(C): _UIWinTAPath = UIWinTAPath
Property(C): WIXUI_INSTALLDIR = INSTALLDIR
Property(C): ALLUSERS = 1
Property(C): ARPNOMODIFY = yes
Property(C): ProgramFiles64Folder = C:\Program Files\
Property(C): TARGETDIR = D:\
Property(C): SourceDir = D:\Install\
Property(C): dirFB744D04EDFDCD8AF58A1449ABBAD45F = C:\Program Files\SplunkUniversalForwarder\etc\apps\introspection_generator_addon\
Property(C): dirB06939592AE1B7F84A5F1802888016F6 = C:\Program Files\SplunkUniversalForwarder\etc\apps\
Property(C): dir1ACCD951EA5C77FB92B36E8AB9382509 = C:\Program Files\SplunkUniversalForwarder\etc\apps\learned\
Property(C): dir302A0E4D0E8A28D4161D5640B55896DC = C:\Program Files\SplunkUniversalForwarder\etc\apps\search\
Property(C): dir060491FD1B1F02D6FE725F0B7611F71E = C:\Program Files\SplunkUniversalForwarder\etc\apps\SplunkUniversalForwarder\
Property(C): dir4B3ADB252806E43AB420F8399AC61D45 = C:\Program Files\SplunkUniversalForwarder\etc\modules\input\
Property(C): dir613AD2632481811E0F84C80F31F4CD56 = C:\Program Files\SplunkUniversalForwarder\etc\modules\
Property(C): dir6EEC3061DFBF56B9D6D2F8CBEC90FE26 = C:\Program Files\SplunkUniversalForwarder\etc\shcluster\
Property(C): dirCFB1DCA36329665F066AABF5013AECA9 = C:\Program Files\SplunkUniversalForwarder\etc\system\
Property(C): Manufacturer = Splunk, Inc.
Property(C): ProductCode = {D77B0D44-D35B-4BD3-A54E-89CBAE2086E6}
Property(C): ProductLanguage = 1033
Property(C): ProductName = UniversalForwarder
Property(C): ProductVersion = 6.2.2.255606
Property(C): ARPPRODUCTICON = WixSplunkIcon
Property(C): DefaultUIFont = WixUI_Font_Normal
Property(C): WixUI_Mode = InstallDir
Property(C): ErrorDialog = ErrorDlg
Property(C): SplunkSvcName = SplunkForwarder
Property(C): UIShowTADialog = 0
Property(C): UIRecvIdxValid = 1
Property(C): DoNotInstallDrivers = 0
Property(C): SplunkX86Msi = 0
Property(C): UICustomize = 1
Property(C): AGREETOLICENSE = Yes
Property(C): LAUNCHSPLUNK = 1
Property(C): os_OK = 1
Property(C): MSIRESTARTMANAGERCONTROL = Disable
Property(C): MSIDISABLERMRESTART = 1
Property(C): MSIRMSHUTDOWN = 2
Property(C): LEGACYDRV = 1
Property(C): AdminProperties = AGREETOLICENSE;CERTFILE;CERTPASSWORD;CLONEPREP;DEPLOYMENT_SERVER;DoNotInstallDrivers;ENABLEADMON;FAILCA;FORCEINSTALLDRIVERS;KEEPSPLUNKHOME;LAUNCHSPLUNK;LEGACYDRV;LOGON_PASSWORD;LOGON_USERNAME;MONITOR_PATH;NEWERVERSIONDETECTED;os_OK;OtherSplunkProductsPresent;PERFMON;PREVPRODUCTCODE;RECEIVING_INDEXER;ROOTCACERTFILE;SET_ADMIN_USER;SPLUNKD_PORT;UIAdmon;UIApplicationLog;UICertFile;UICertPassword;UIConfirmCertPassword;UIConfirmDomainPassword;UIDeplSrv;UIDeplSrvPort;UIDomainAccount;UIDomainPassword;UIForwardedEventsLog;UIMonPath;UINoDeplSrvOrIndexer;UIPerfCpu;UIPerfDisk;UIPerfMemory;UIPerfNetstat;UIRecvIdx;UIRecvIdxPort;UIRootCertFile;UISecurityLog;UISetupLog;UISystemLog;UIWinTAPath;WINDOWS_TA_LOCATION;WINDOWS_TA_VERSION;WINEVENTLOG_APP_ENABLE;WINEVENTLOG_FWD_ENABLE;WINEVENTLOG_SEC_ENABLE;WINEVENTLOG_SET_ENABLE;WINEVENTLOG_SYS_ENABLE
Property(C): SecureCustomProperties = ARPNOMODIFY;NEWERVERSIONDETECTED;PREVPRODUCTCODE
Property(C): MsiHiddenProperties = LOGON_PASSWORD;SetupServiceConfig
Property(C): MsiLogFileLocation = C:\Users\jjb01\AppData\Local\Temp\3\MSIda742.LOG
Property(C): PackageCode = {1586EC18-33AD-4646-B29D-F56E77D62B32}
Property(C): ProductState = -1
Property(C): PackagecodeChanging = 1
Property(C): CURRENTDIRECTORY = D:\Install
Property(C): CLIENTUILEVEL = 0
Property(C): CLIENTPROCESSID = 9560
Property(C): VersionDatabase = 200
Property(C): VersionMsi = 5.00
Property(C): VersionNT = 603
Property(C): VersionNT64 = 603
Property(C): WindowsBuild = 9600
Property(C): ServicePackLevel = 0
Property(C): ServicePackLevelMinor = 0
Property(C): MsiNTProductType = 3
Property(C): MsiNTSuiteDataCenter = 1
Property(C): WindowsFolder = C:\Windows\
Property(C): WindowsVolume = C:\
Property(C): System64Folder = C:\Windows\system32\
Property(C): SystemFolder = C:\Windows\SysWOW64\
Property(C): RemoteAdminTS = 1
Property(C): TempFolder = C:\Users\jjb01\AppData\Local\Temp\3\
Property(C): ProgramFilesFolder = C:\Program Files (x86)\
Property(C): CommonFilesFolder = C:\Program Files (x86)\Common Files\
Property(C): CommonFiles64Folder = C:\Program Files\Common Files\
Property(C): AppDataFolder = C:\Users\jjb01\AppData\Roaming\
Property(C): FavoritesFolder = C:\Users\jjb01\Favorites\
Property(C): NetHoodFolder = C:\Users\jjb01\AppData\Roaming\Microsoft\Windows\Network Shortcuts\
Property(C): PersonalFolder = C:\Users\jjb01\Documents\
Property(C): PrintHoodFolder = C:\Users\jjb01\AppData\Roaming\Microsoft\Windows\Printer Shortcuts\
Property(C): RecentFolder = C:\Users\jjb01\AppData\Roaming\Microsoft\Windows\Recent\
Property(C): SendToFolder = C:\Users\jjb01\AppData\Roaming\Microsoft\Windows\SendTo\
Property(C): TemplateFolder = C:\ProgramData\Microsoft\Windows\Templates\
Property(C): CommonAppDataFolder = C:\ProgramData\
Property(C): LocalAppDataFolder = C:\Users\jjb01\AppData\Local\
Property(C): MyPicturesFolder = C:\Users\jjb01\Pictures\
Property(C): AdminToolsFolder = C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\
Property(C): StartupFolder = C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\
Property(C): ProgramMenuFolder = C:\ProgramData\Microsoft\Windows\Start Menu\Programs\
Property(C): StartMenuFolder = C:\ProgramData\Microsoft\Windows\Start Menu\
Property(C): DesktopFolder = C:\Users\Public\Desktop\
Property(C): FontsFolder = C:\Windows\Fonts\
Property(C): GPTSupport = 1
Property(C): OLEAdvtSupport = 1
Property(C): ShellAdvtSupport = 1
Property(C): MsiAMD64 = 6
Property(C): Msix64 = 6
Property(C): Intel = 6
Property(C): PhysicalMemory = 32689
Property(C): VirtualMemory = 13484
Property(C): LogonUser = jjb01
Property(C): UserSID = S-1-5-21-2831220176-3201806128-1925276611-1173
Property(C): UserLanguageID = 2057
Property(C): ComputerName = RS002016
Property(C): SystemLanguageID = 2057
Property(C): ScreenX = 1920
Property(C): ScreenY = 1080
Property(C): CaptionHeight = 23
Property(C): BorderTop = 1
Property(C): BorderSide = 1
Property(C): TextHeight = 16
Property(C): TextInternalLeading = 3
Property(C): ColorBits = 32
Property(C): TTCSupport = 1
Property(C): Time = 16:04:30
Property(C): Date = 22/04/2015
Property(C): MsiNetAssemblySupport = 4.0.30319.33440
Property(C): MsiWin32AssemblySupport = 6.3.9600.17415
Property(C): RedirectedDllSupport = 2
Property(C): AdminUser = 1
Property(C): Privileged = 1
Property(C): USERNAME = Windows User
Property(C): DATABASE = D:\Install\splunkforwarder-6.2.2-255606-x64-release.msi
Property(C): OriginalDatabase = D:\Install\splunkforwarder-6.2.2-255606-x64-release.msi
Property(C): SOURCEDIR = D:\Install\
Property(C): VersionHandler = 5.00
Property(C): UILevel = 5
Property(C): ACTION = INSTALL
Property(C): EXECUTEACTION = INSTALL
Property(C): ROOTDRIVE = D:\
Property(C): CostingComplete = 1
Property(C): OutOfDiskSpace = 0
Property(C): OutOfNoRbDiskSpace = 0
Property(C): PrimaryVolumeSpaceAvailable = 0
Property(C): PrimaryVolumeSpaceRequired = 0
Property(C): PrimaryVolumeSpaceRemaining = 0
Property(C): INSTALLLEVEL = 1
Property(C): WIXUI_INSTALLDIR_VALID = 1
Property(C): UICertParamsInvalid = 0
Property(C): UINoDeplSrvOrIndexer = 0
Property(C): DEPLOYMENT_SERVER = 172.16.1.103:8089
Property(C): UIDeplSrvValid = 1
Property(C): RECEIVING_INDEXER = 172.16.1.103:9997
=== Logging stopped: 22/04/2015 16:04:30 ===
MSI (c) (58:08) [16:04:30:467]: Note: 1: 1708
MSI (c) (58:08) [16:04:30:467]: Note: 1: 2205 2: 3: Error
MSI (c) (58:08) [16:04:30:467]: Note: 1: 2228 2: 3: Error 4: SELECT `Message` FROM `Error` WHERE `Error` = 1708
MSI (c) (58:08) [16:04:30:467]: Note: 1: 2205 2: 3: Error
MSI (c) (58:08) [16:04:30:467]: Note: 1: 2228 2: 3: Error 4: SELECT `Message` FROM `Error` WHERE `Error` = 1709
MSI (c) (58:08) [16:04:30:467]: Product: UniversalForwarder -- Installation failed.
MSI (c) (58:08) [16:04:30:467]: Windows Installer installed the product. Product Name: UniversalForwarder. Product Version: 6.2.2.255606. Product Language: 1033. Manufacturer: Splunk, Inc.. Installation success or error status: 1603.
MSI (c) (58:08) [16:04:30:467]: Grabbed execution mutex.
MSI (c) (58:08) [16:04:30:467]: Cleaning up uninstalled install packages, if any exist
MSI (c) (58:08) [16:04:30:467]: MainEngineThread is returning 1603
=== Verbose logging stopped: 22/04/2015 16:04:30 ===
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment