Confirm that you can reach the Splunk Servers at https://deployment.splunk.uic.edu:8443 or telnet deployment.splunk.uic.edu port 8089 and inputs1.illinoischicago.splunkcloud.com:9997.
Download Splunk Universal Forwarder for windows from https://uofi.app.box.com/splunk ( we are doing our best to keep the package up-to-date). You can also get it from Splunk at https://www.splunk.com/en_us/download/universal-forwarder.html?locale=en_us
Official Splunk page https://docs.splunk.com/Documentation/Forwarder/9.0.1/Forwarder/InstallaWindowsuniversalforwarderfromaninstaller
msiexec.exe /i "C:\TEMP\splunkforwarder-9.0.0.1-9e907cedecb1-x64-release.msi" WINEVENTLOG_APP_ENABLE=0 WINEVENTLOG_SEC_ENABLE=0 WINEVENTLOG_SYS_ENABLE=0 WINEVENTLOG_FWD_ENABLE=0 WINEVENTLOG_SET_ENABLE=0 AGREETOLICENSE=Yes SERVICESTARTTYPE=auto DEPLOYMENT_SERVER="deployment.splunk.uic.edu:8089" /norestart /l*v "%windir%\Logs\splunkUF_9.0.0.1.log" /quiet
Double-click the MSI file to start the installation.
The first screen of the installer should pop-up. Select the Check this box to accept the License Agreement check box and the check box for either Splunk Enterprise or Splunk Cloud.
(Optional) In the Destination Folder dialog box, click Change to specify a different installation directory.
On the Certificate Information page, click Next as a best practice. Do not specify any parameters.
As a best practice, run the Universal Forwarder as the Local System user and click Next. See "Install as a low-privilege user" for information about securing your system when installing as a local user.
(Optional) Select one or more Windows inputs from the list and click Next.
Create a username and password for your Universal Forwarder administrator account. Check Generate random password to let Splunk generate a password for you.
In the Deployment Server pane, enter deployment.splunk.uic.edu and management port 8089 for the deployment server that you want the universal forwarder to connect to and click Next.
In the Receiving Indexer pane, leave it empty for the receiving indexer that you want the universal forwarder to send data to and click Next.
Click Install to proceed with the installation. The installer runs and displays the Installation Completed dialog box. The universal forwarder automatically starts.
From Windows Control Panel, confirm that the SplunkForwarder service runs.
SplunkForwarder