Splunk Enterprise
A way to uninstall Splunk Enterprise from your system
This page is about Splunk Enterprise for Windows. Below you can find details on how to remove it from your PC. It was coded for Windows by Splunk, Inc.. Further information on Splunk, Inc. can be found here. Splunk Enterprise is normally installed in the C:\Program Files\Splunk folder, however this location can vary a lot depending on the user's decision while installing the program. The full command line for removing Splunk Enterprise is MsiExec.exe /X{2DF4C6C6-7888-4635-9280-AC165BBD4110}. Note that if you will type this command in Start / Run Note you may receive a notification for administrator rights. The application's main executable file is titled splunk.exe and its approximative size is 552.21 KB (565464 bytes).Splunk Enterprise installs the following the executables on your PC, occupying about 479.81 MB (503119216 bytes) on disk.
- bloom.exe (84.21 KB)
- btool.exe (84.21 KB)
- btprobe.exe (84.21 KB)
- classify.exe (84.21 KB)
- exporttool.exe (84.21 KB)
- importtool.exe (84.21 KB)
- jsmin.exe (25.71 KB)
- License Server Win.exe (1.68 MB)
- locktest.exe (33.21 KB)
- locktool.exe (3.16 MB)
- mongod-3.6.exe (30.09 MB)
- mongod-4.0.exe (31.63 MB)
- mongod.exe (35.94 MB)
- mongodump.exe (24.32 MB)
- mongorestore.exe (24.80 MB)
- node.exe (19.67 MB)
- openssl.exe (502.21 KB)
- pcregextest.exe (3.17 MB)
- python.exe (99.71 KB)
- python3.exe (99.71 KB)
- recover-metadata.exe (84.21 KB)
- searchtest.exe (84.21 KB)
- signtool.exe (84.21 KB)
- splunk-admon.exe (18.75 MB)
- splunk-compresstool.exe (78.71 KB)
- splunk-MonitorNoHandle.exe (18.68 MB)
- splunk-netmon.exe (18.78 MB)
- splunk-optimize-lex.exe (319.71 KB)
- splunk-optimize.exe (324.71 KB)
- splunk-perfmon.exe (18.83 MB)
- splunk-powershell.exe (18.76 MB)
- splunk-regmon.exe (18.82 MB)
- splunk-winevtlog.exe (18.94 MB)
- splunk-winhostinfo.exe (18.69 MB)
- splunk-winprintmon.exe (18.73 MB)
- splunk-wmi.exe (18.68 MB)
- splunk.exe (552.21 KB)
- splunkd.exe (56.42 MB)
- tsidxprobe.exe (324.21 KB)
- tsidxprobe_plo.exe (327.71 KB)
- walklex.exe (314.71 KB)
- assistsup.exe (26.50 MB)
- wininst-10.0-amd64.exe (225.71 KB)
- wininst-10.0.exe (195.21 KB)
- wininst-14.0-amd64.exe (582.71 KB)
- wininst-14.0.exe (456.21 KB)
- wininst-6.0.exe (68.71 KB)
- wininst-7.1.exe (72.71 KB)
- wininst-8.0.exe (68.71 KB)
- wininst-9.0-amd64.exe (227.71 KB)
- wininst-9.0.exe (200.21 KB)
- cli-32.exe (72.71 KB)
- cli-64.exe (81.71 KB)
- cli.exe (72.71 KB)
- gui-32.exe (72.71 KB)
- gui-64.exe (82.21 KB)
- gui.exe (72.71 KB)
- easy_install-3.7.exe (81.71 KB)
- easy_install.exe (81.71 KB)
- wheel.exe (81.71 KB)
- assistsup.exe (28.38 MB)
The current page applies to Splunk Enterprise version 9.1.2.0 alone. You can find below info on other releases of Splunk Enterprise:
- 6.6.3.0
- 8.0.1.0
- 8.0.6.0
- 6.4.3.0
- 8.0.2.0
- 9.1.0.0
- 8.1.0.0
- 9.0.2.0
- 6.5.3.0
- 6.3.1.0
- 8.2.2.0
- 7.0.2.0
- 8.0.5.0
- 9.0.3.0
- 7.1.1.0
- 6.2.3.264376
- 7.3.1.0
- 6.4.1.0
- 9.0.5.0
- 8.2.3.0
- 7.2.0.0
- 6.2.6.274160
- 7.3.9.0
- 9.0.1.0
- 8.2.5.0
- 7.2.4.0
- 8.0.3.0
- 8.0.4.1
- 7.0.1.0
- 8.1.1.0
- 8.1.2.0
- 9.2.1.0
- 6.2.1.245427
- 8.2.0.0
- 9.0.0.1
- 6.5.2.0
- 7.3.0.0
- 9.2.0.1
- 7.3.4.0
- 6.5.0.0
- 6.2.0.237341
- 6.2.2.255606
- 8.0.0.0
- 7.0.3.0
- 6.4.11.0
- 6.4.0.0
- 7.1.0.0
- 8.2.1.0
- 6.4.2.0
- 8.0.4.0
- 9.1.0.1
- 8.1.3.0
- 8.2.2.1
- 7.2.6.0
- 7.0.0.0
- 7.1.2.0
- 9.0.4.0
- 6.3.2.0
- 7.2.2.0
- 6.6.2.0
- 6.6.1.0
- 8.2.4.0
- 9.0.0.0
- 9.0.4.1
- 6.2.4.271043
- 9.1.0.2
- 8.1.0.1
- 6.6.0.0
- 6.3.5.0
- 6.5.1.0
- 8.2.6.0
- 8.0.2.1
- 6.3.3.0
- 6.3.0.0
- 7.2.3.0
- 9.1.1.0
- 7.3.3.0
Following the uninstall process, the application leaves some files behind on the PC. Part_A few of these are shown below.
Directories that were left behind:
- C:\Users\%user%\splunk
Files remaining:
- C:\Users\%user%\AppData\Local\GitHubDesktop\app-3.2.6\resources\app\static\gitignore\community\Splunk.gitignore
- C:\Users\%user%\AppData\Local\Temp\splunk.log
- C:\Users\%user%\AppData\Roaming\Microsoft\Windows\Recent\Splunk Enterprise v9.1.2 Full Activated - WwW.Dr-FarFar.CoM.lnk
- C:\Users\%user%\splunk\bin\_asyncio.p3d
- C:\Users\%user%\splunk\bin\_bz2.p3d
- C:\Users\%user%\splunk\bin\_ctypes.p3d
- C:\Users\%user%\splunk\bin\_ctypes_test.p3d
- C:\Users\%user%\splunk\bin\_decimal.p3d
- C:\Users\%user%\splunk\bin\_elementpath.cp37-win_amd64.p3d
- C:\Users\%user%\splunk\bin\_elementtree.p3d
- C:\Users\%user%\splunk\bin\_hashlib.p3d
- C:\Users\%user%\splunk\bin\_msi.p3d
- C:\Users\%user%\splunk\bin\_multiprocessing.p3d
- C:\Users\%user%\splunk\bin\_overlapped.p3d
- C:\Users\%user%\splunk\bin\_queue.p3d
- C:\Users\%user%\splunk\bin\_socket.p3d
- C:\Users\%user%\splunk\bin\_ssl.p3d
- C:\Users\%user%\splunk\bin\_testbuffer.p3d
- C:\Users\%user%\splunk\bin\_testcapi.p3d
- C:\Users\%user%\splunk\bin\_testconsole.p3d
- C:\Users\%user%\splunk\bin\_testimportmultiple.p3d
- C:\Users\%user%\splunk\bin\_testmultiphase.p3d
- C:\Users\%user%\splunk\bin\_win32sysloader.p3d
- C:\Users\%user%\splunk\bin\api-ms-win-core-console-l1-1-0.dll
- C:\Users\%user%\splunk\bin\api-ms-win-core-datetime-l1-1-0.dll
- C:\Users\%user%\splunk\bin\api-ms-win-core-debug-l1-1-0.dll
- C:\Users\%user%\splunk\bin\api-ms-win-core-errorhandling-l1-1-0.dll
- C:\Users\%user%\splunk\bin\api-ms-win-core-file-l1-1-0.dll
- C:\Users\%user%\splunk\bin\api-ms-win-core-file-l1-2-0.dll
- C:\Users\%user%\splunk\bin\api-ms-win-core-file-l2-1-0.dll
- C:\Users\%user%\splunk\bin\api-ms-win-core-handle-l1-1-0.dll
- C:\Users\%user%\splunk\bin\api-ms-win-core-heap-l1-1-0.dll
- C:\Users\%user%\splunk\bin\api-ms-win-core-interlocked-l1-1-0.dll
- C:\Users\%user%\splunk\bin\api-ms-win-core-libraryloader-l1-1-0.dll
- C:\Users\%user%\splunk\bin\api-ms-win-core-localization-l1-2-0.dll
- C:\Users\%user%\splunk\bin\api-ms-win-core-memory-l1-1-0.dll
- C:\Users\%user%\splunk\bin\api-ms-win-core-namedpipe-l1-1-0.dll
- C:\Users\%user%\splunk\bin\api-ms-win-core-processenvironment-l1-1-0.dll
- C:\Users\%user%\splunk\bin\api-ms-win-core-processthreads-l1-1-0.dll
- C:\Users\%user%\splunk\bin\api-ms-win-core-processthreads-l1-1-1.dll
- C:\Users\%user%\splunk\bin\api-ms-win-core-profile-l1-1-0.dll
- C:\Users\%user%\splunk\bin\api-ms-win-core-rtlsupport-l1-1-0.dll
- C:\Users\%user%\splunk\bin\api-ms-win-core-string-l1-1-0.dll
- C:\Users\%user%\splunk\bin\api-ms-win-core-synch-l1-1-0.dll
- C:\Users\%user%\splunk\bin\api-ms-win-core-synch-l1-2-0.dll
- C:\Users\%user%\splunk\bin\api-ms-win-core-sysinfo-l1-1-0.dll
- C:\Users\%user%\splunk\bin\api-ms-win-core-timezone-l1-1-0.dll
- C:\Users\%user%\splunk\bin\api-ms-win-core-util-l1-1-0.dll
- C:\Users\%user%\splunk\bin\api-ms-win-crt-conio-l1-1-0.dll
- C:\Users\%user%\splunk\bin\api-ms-win-crt-convert-l1-1-0.dll
- C:\Users\%user%\splunk\bin\api-ms-win-crt-environment-l1-1-0.dll
- C:\Users\%user%\splunk\bin\api-ms-win-crt-filesystem-l1-1-0.dll
- C:\Users\%user%\splunk\bin\api-ms-win-crt-heap-l1-1-0.dll
- C:\Users\%user%\splunk\bin\api-ms-win-crt-locale-l1-1-0.dll
- C:\Users\%user%\splunk\bin\api-ms-win-crt-math-l1-1-0.dll
- C:\Users\%user%\splunk\bin\api-ms-win-crt-multibyte-l1-1-0.dll
- C:\Users\%user%\splunk\bin\api-ms-win-crt-private-l1-1-0.dll
- C:\Users\%user%\splunk\bin\api-ms-win-crt-process-l1-1-0.dll
- C:\Users\%user%\splunk\bin\api-ms-win-crt-runtime-l1-1-0.dll
- C:\Users\%user%\splunk\bin\api-ms-win-crt-stdio-l1-1-0.dll
- C:\Users\%user%\splunk\bin\api-ms-win-crt-string-l1-1-0.dll
- C:\Users\%user%\splunk\bin\api-ms-win-crt-time-l1-1-0.dll
- C:\Users\%user%\splunk\bin\api-ms-win-crt-utility-l1-1-0.dll
- C:\Users\%user%\splunk\bin\archive.dll
- C:\Users\%user%\splunk\bin\bloom.exe
- C:\Users\%user%\splunk\bin\bson-1.0.dll
- C:\Users\%user%\splunk\bin\btool.exe
- C:\Users\%user%\splunk\bin\btprobe.exe
- C:\Users\%user%\splunk\bin\builder.cp37-win_amd64.p3d
- C:\Users\%user%\splunk\bin\classify.exe
- C:\Users\%user%\splunk\bin\clean.cp37-win_amd64.p3d
- C:\Users\%user%\splunk\bin\coldToFrozenExample.py
- C:\Users\%user%\splunk\bin\copyright.txt
- C:\Users\%user%\splunk\bin\dbmanipulator.py
- C:\Users\%user%\splunk\bin\diff.cp37-win_amd64.p3d
- C:\Users\%user%\splunk\bin\etree.cp37-win_amd64.p3d
- C:\Users\%user%\splunk\bin\exporttool.exe
- C:\Users\%user%\splunk\bin\fill_summary_index.py
- C:\Users\%user%\splunk\bin\genAuditKeys.py
- C:\Users\%user%\splunk\bin\genRootCA.bat
- C:\Users\%user%\splunk\bin\genSignedServerCert.py
- C:\Users\%user%\splunk\bin\genWebCert.py
- C:\Users\%user%\splunk\bin\importtool.exe
- C:\Users\%user%\splunk\bin\installit.py
- C:\Users\%user%\splunk\bin\jsmin.exe
- C:\Users\%user%\splunk\bin\libeay32.dll
- C:\Users\%user%\splunk\bin\libexslt.dll
- C:\Users\%user%\splunk\bin\libsasl.dll
- C:\Users\%user%\splunk\bin\libxml2.dll
- C:\Users\%user%\splunk\bin\libxmlsec.dll
- C:\Users\%user%\splunk\bin\libxmlsec-openssl.dll
- C:\Users\%user%\splunk\bin\libxslt.dll
- C:\Users\%user%\splunk\bin\locktest.exe
- C:\Users\%user%\splunk\bin\locktool.exe
- C:\Users\%user%\splunk\bin\mimalloc-override.dll
- C:\Users\%user%\splunk\bin\mimalloc-redirect.dll
- C:\Users\%user%\splunk\bin\mmapfile.p3d
- C:\Users\%user%\splunk\bin\mongoc-1.0.dll
- C:\Users\%user%\splunk\bin\mongod.exe
- C:\Users\%user%\splunk\bin\mongod-3.6.exe
Use regedit.exe to manually remove from the Windows Registry the keys below:
- HKEY_CURRENT_USER\Software\Microsoft\Splunk Enterprise
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Products\6C6C4FD2888753642908CA61B5DB1401
- HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{2DF4C6C6-7888-4635-9280-AC165BBD4110}
- HKEY_LOCAL_MACHINE\Software\Splunk
Additional registry values that you should remove:
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Products\6C6C4FD2888753642908CA61B5DB1401\ProductName
- HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\Folders\C:\Users\UserName\splunk\
- HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\Folders\C:\Windows\Installer\{2DF4C6C6-7888-4635-9280-AC165BBD4110}\
- HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\splknetdrv\Description
- HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Splunkd\Description
- HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Splunkd\ImagePath
- HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\splunkdrv\DisplayName
How to delete Splunk Enterprise using Advanced Uninstaller PRO
Splunk Enterprise is a program by the software company Splunk, Inc.. Frequently, computer users decide to erase this program. This can be efortful because uninstalling this manually requires some advanced knowledge related to removing Windows applications by hand. The best SIMPLE solution to erase Splunk Enterprise is to use Advanced Uninstaller PRO. Take the following steps on how to do this:1. If you don't have Advanced Uninstaller PRO already installed on your Windows system, install it. This is good because Advanced Uninstaller PRO is a very efficient uninstaller and all around utility to maximize the performance of your Windows system.
DOWNLOAD NOW
- visit Download Link
- download the setup by pressing the DOWNLOAD NOW button
- install Advanced Uninstaller PRO
3. Press the General Tools button
4. Click on the Uninstall Programs feature
5. All the applications installed on the computer will be shown to you
6. Navigate the list of applications until you find Splunk Enterprise or simply activate the Search field and type in "Splunk Enterprise". If it is installed on your PC the Splunk Enterprise app will be found very quickly. Notice that after you click Splunk Enterprise in the list , the following data regarding the program is shown to you:
- Safety rating (in the lower left corner). The star rating explains the opinion other people have regarding Splunk Enterprise, ranging from "Highly recommended" to "Very dangerous".
- Opinions by other people - Press the Read reviews button.
- Details regarding the application you want to uninstall, by pressing the Properties button.
8. After uninstalling Splunk Enterprise, Advanced Uninstaller PRO will ask you to run a cleanup. Click Next to start the cleanup. All the items that belong Splunk Enterprise that have been left behind will be detected and you will be able to delete them. By removing Splunk Enterprise using Advanced Uninstaller PRO, you are assured that no registry items, files or directories are left behind on your system.
Your computer will remain clean, speedy and able to serve you properly.
Disclaimer
This page is not a piece of advice to uninstall Splunk Enterprise by Splunk, Inc. from your computer, nor are we saying that Splunk Enterprise by Splunk, Inc. is not a good application for your PC. This page simply contains detailed info on how to uninstall Splunk Enterprise in case you decide this is what you want to do. The information above contains registry and disk entries that our application Advanced Uninstaller PRO discovered and classified as "leftovers" on other users' computers.
2023-11-21 / Written by Andreea Kartman for Advanced Uninstaller PRO
follow @DeeaKartmanLast update on: 2023-11-21 14:52:04.363