bug fix sysmon splunk uf

Skr1ptKid-0x · Sep 4, 2024 · 598488c · 598488c
1 parent c31b5c5
commit 598488c
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/terraform/ansible/roles/windows_universal_forwarder/tasks/install_splunk_uf.yml b/terraform/ansible/roles/windows_universal_forwarder/tasks/install_splunk_uf.yml
@@ -8,7 +8,7 @@
 - name: Install Splunk_UF MSI
   win_package:
     path: C:\splunkuf.msi
-    arguments: 'WINEVENTLOG_SEC_ENABLE=0 WINEVENTLOG_SYS_ENABLE=0 WINEVENTLOG_APP_ENABLE=0 SPLUNKPASSWORD=Pl3ase-k1Ll-me:p AGREETOLICENSE=YES /quiet'
+    arguments: 'WINEVENTLOG_SEC_ENABLE=0 WINEVENTLOG_SYS_ENABLE=0 WINEVENTLOG_APP_ENABLE=0 PRIVILEGESECURITY=1 USE_LOCAL_SYSTEM=1 SPLUNKPASSWORD=Pl3ase-k1Ll-me:p AGREETOLICENSE=YES /quiet'
 
 - name: Start Splunk
   win_service: