Can I piggy-back (insert) a Win32 setup.exe (windows program) onto a Splunk App, and use Splunk Deployment Server to deploy the Splunk app, and have the deployed Splunk app run a script that performs an unattended installation of the setup.exe on the target system, using SYSTEM privileges?
Yes you can, but you should be very familiar with how the deployment server works first.
I once used the deployment server to reconfigure some Splunk apps and other system changes outside of Splunk, but the content pushed to the servers was designed to self-destruct so that it would not get re-deployed and not continually trigger once deployed.
So, Yea you can do it, just make sure you know what you're doing.
One suggestion, you might want to have the script copy the installer to a temp directory before the script executes the installer because your system may prohibit installers from running in the program files directory.
This appears to work, but the result is imperfect, compared to if I install manually as a local admin using the exact same command. Using the deployment server method, files are installed, a service is installed and it launches, and all the options (switches) appear to be used during the install, but the installed program fails in a critical way when installed using the deployment server method.
I am wondering whether I should use a .path file in inputs.conf in order to reference the out-of-app locations and executables such as msiexec.exe.
Or maybe I need "start_by_shell = true" in the inputs.conf.
Any suggestions/experience with this? Thank you.
Without knowing the error it is hard to say.
If you compare the service properties between the local and remote install, is the Log On user the same?
Does it work after the remote system is rebooted?
How to determine which apps were downloaded and by what clients from the Deployment Server?