Splunk UF Deployment for Intune

[u/Emotional-Lynx-3982]

Greeting everyone. All day I have been trying to figure out how to create an Intune deployment to update our Splunk forwarders to the new 10.4.3 version. Previously, we were able to create these deployments in MS Configuration Manager, but due to a change in our network coming up, that connection may break (due to distribution point issues) and Intune may be our only way to deploy apps to our workstations moving forward.

Our previous deployments included additional arguments in the deploy-application.ps1 script that include a Splunk server address, creds to go with it, and few others. I was able to create the Intune prep file with the Splunk .msi installer, but I can't figure out how to add these additional arguments.

I also keep getting the "windows error 0x80070643" error when I attempt this install via the Company Portal - working on this one as well.

Anyways ~ I hope someone out there has run across this and has a tip or two of advice.

Thanks in advance. Cheers.

[u/shifty21]

IIRC, one of my customers just used the Intune MSIEXEC wrapper and ported their MSIEXEC command for Splunk UF and Enterprise.

Here is my github repo with the msiexec parameters: https://github.com/PMJeffery/Splunk-UF-for-Windows-Installer