Splunk Enterprise

A way to uninstall Splunk Enterprise from your system

This page contains complete information on how to remove Splunk Enterprise for Windows. The Windows version was developed by Splunk, Inc.. More data about Splunk, Inc. can be seen here. Usually the Splunk Enterprise application is placed in the C:\Program Files\Splunk folder, depending on the user's option during setup. Splunk Enterprise's full uninstall command line is MsiExec.exe /X{7C26D26F-86D9-47B8-9147-5AFCFFCF8F57}. splunk.exe is the programs's main file and it takes approximately 546.82 KB (559944 bytes) on disk.

Splunk Enterprise is composed of the following executables which occupy 803.84 MB (842883312 bytes) on disk:

• bloom.exe (81.32 KB)
• btool.exe (81.32 KB)
• btprobe.exe (81.32 KB)
• classify.exe (81.32 KB)
• compsup.exe (139.45 MB)
• exporttool.exe (81.32 KB)
• importtool.exe (81.32 KB)
• jsmin.exe (21.82 KB)
• locktest.exe (29.32 KB)
• locktool.exe (1.24 MB)
• mongod-3.6.exe (30.09 MB)
• mongod-4.0.exe (31.63 MB)
• mongod.exe (35.94 MB)
• mongodump.exe (13.50 MB)
• mongorestore.exe (13.80 MB)
• node.exe (19.67 MB)
• openssl.exe (498.32 KB)
• pcregextest.exe (1.27 MB)
• python3.exe (95.82 KB)
• python3.7.exe (95.82 KB)
• recover-metadata.exe (81.32 KB)
• searchtest.exe (81.32 KB)
• signtool.exe (81.32 KB)
• splunk-admon.exe (18.59 MB)
• splunk-compresstool.exe (74.82 KB)
• splunk-MonitorNoHandle.exe (18.51 MB)
• splunk-netmon.exe (18.63 MB)
• splunk-optimize-lex.exe (315.32 KB)
• splunk-optimize.exe (320.32 KB)
• splunk-perfmon.exe (18.66 MB)
• splunk-powershell.exe (18.59 MB)
• splunk-regmon.exe (18.64 MB)
• splunk-tlsd.exe (1.24 MB)
• splunk-winevtlog.exe (18.77 MB)
• splunk-winhostinfo.exe (18.51 MB)
• splunk-winprintmon.exe (18.56 MB)
• splunk-wmi.exe (18.50 MB)
• splunk.exe (546.82 KB)
• splunkd.exe (62.49 MB)
• supervisor-simulator.exe (1.24 MB)
• tsidxprobe.exe (319.82 KB)
• tsidxprobe_plo.exe (323.32 KB)
• walklex.exe (309.82 KB)
• chromium.exe (177.09 MB)
• assistsup.exe (30.21 MB)
• wininst-10.0-amd64.exe (221.82 KB)
• wininst-10.0.exe (191.32 KB)
• wininst-14.0-amd64.exe (578.82 KB)
• wininst-14.0.exe (452.32 KB)
• wininst-6.0.exe (64.82 KB)
• wininst-7.1.exe (68.82 KB)
• wininst-8.0.exe (64.82 KB)
• wininst-9.0-amd64.exe (223.82 KB)
• wininst-9.0.exe (196.32 KB)
• t32.exe (100.32 KB)
• t64-arm.exe (183.32 KB)
• t64.exe (110.32 KB)
• w32.exe (94.32 KB)
• w64-arm.exe (169.32 KB)
• w64.exe (104.32 KB)
• cli.exe (68.82 KB)
• cli-64.exe (77.82 KB)
• cli-arm64.exe (138.82 KB)
• gui.exe (68.82 KB)
• gui-64.exe (78.32 KB)
• gui-arm64.exe (139.32 KB)
• pip3.exe (110.70 KB)
• wheel.exe (110.69 KB)
• pip3.exe (110.70 KB)
• wheel.exe (110.69 KB)
• identity.exe (18.97 MB)
• assistsup.exe (28.50 MB)

...click to view all...

The current page applies to Splunk Enterprise version 9.3.2.0 alone. You can find here a few links to other Splunk Enterprise versions:

• 6.6.3.0
• 8.0.1.0
• 8.0.6.0
• 6.4.3.0
• 8.0.2.0
• 9.1.0.0
• 8.1.0.0
• 9.0.2.0
• 6.5.3.0
• 6.3.1.0
• 8.2.2.0
• 7.0.2.0
• 8.0.5.0
• 9.0.3.0
• 9.4.2.0
• 9.3.0.0
• 7.1.1.0
• 6.2.3.264376
• 7.3.1.0
• 6.4.1.0
• 9.0.5.0
• 8.2.3.0
• 7.2.0.0
• 6.2.6.274160
• 7.3.9.0
• 9.0.1.0
• 8.2.5.0
• 7.2.4.0
• 8.0.3.0
• 8.0.4.1
• 7.0.1.0
• 8.1.1.0
• 8.1.2.0
• 9.4.0.0
• 9.2.1.0
• 6.2.1.245427
• 8.2.0.0
• 9.0.0.1
• 6.5.2.0
• 7.3.0.0
• 9.1.3.0
• 9.2.0.1
• 9.4.1.0
• 7.3.4.0
• 6.5.0.0
• 6.2.0.237341
• 6.2.2.255606
• 8.0.0.0
• 9.3.1.0
• 7.0.3.0
• 6.4.11.0
• 6.4.0.0
• 7.1.0.0
• 8.2.1.0
• 6.4.2.0
• 8.0.4.0
• 9.1.0.1
• 8.1.3.0
• 8.2.2.1
• 7.2.6.0
• 7.0.0.0
• 7.1.2.0
• 9.0.4.0
• 6.3.2.0
• 7.2.2.0
• 6.6.2.0
• 6.6.1.0
• 8.2.4.0
• 9.0.0.0
• 9.1.2.0
• 9.0.4.1
• 9.2.2.0
• 6.2.4.271043
• 9.1.0.2
• 8.1.0.1
• 6.6.0.0
• 6.3.5.0
• 6.5.1.0
• 8.2.6.0
• 8.0.2.1
• 6.3.3.0
• 6.3.0.0
• 7.2.3.0
• 9.1.1.0
• 7.3.3.0

...click to view all...
Following the uninstall process, the application leaves leftovers on the PC. Part_A few of these are shown below.

You should delete the folders below after you uninstall Splunk Enterprise:

• C:\Program Files\Splunk
• C:\Users\%user%\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.splunk.com_0.indexeddb.leveldb
• C:\Users\%user%\AppData\Roaming\Mozilla\Firefox\Profiles\2frbqh60.default-release\storage\default\https+++splunkbase.splunk.com

The files below were left behind on your disk by Splunk Enterprise when you uninstall it:

• C:\Program Files\Splunk\bin\_asyncio.p39d
• C:\Program Files\Splunk\bin\_asyncio.p3d
• C:\Program Files\Splunk\bin\_bz2.p39d
• C:\Program Files\Splunk\bin\_bz2.p3d
• C:\Program Files\Splunk\bin\_ctypes.p39d
• C:\Program Files\Splunk\bin\_ctypes.p3d
• C:\Program Files\Splunk\bin\_ctypes_test.p39d
• C:\Program Files\Splunk\bin\_ctypes_test.p3d
• C:\Program Files\Splunk\bin\_decimal.p39d
• C:\Program Files\Splunk\bin\_decimal.p3d
• C:\Program Files\Splunk\bin\_elementpath.cp37-win_amd64.p3d
• C:\Program Files\Splunk\bin\_elementpath.cp39-win_amd64.p39d
• C:\Program Files\Splunk\bin\_elementtree.p39d
• C:\Program Files\Splunk\bin\_elementtree.p3d
• C:\Program Files\Splunk\bin\_hashlib.p39d
• C:\Program Files\Splunk\bin\_hashlib.p3d
• C:\Program Files\Splunk\bin\_msi.p39d
• C:\Program Files\Splunk\bin\_msi.p3d
• C:\Program Files\Splunk\bin\_multiprocessing.p39d
• C:\Program Files\Splunk\bin\_multiprocessing.p3d
• C:\Program Files\Splunk\bin\_overlapped.p39d
• C:\Program Files\Splunk\bin\_overlapped.p3d
• C:\Program Files\Splunk\bin\_queue.p39d
• C:\Program Files\Splunk\bin\_queue.p3d
• C:\Program Files\Splunk\bin\_socket.p39d
• C:\Program Files\Splunk\bin\_socket.p3d
• C:\Program Files\Splunk\bin\_sqlite3.p39d
• C:\Program Files\Splunk\bin\_sqlite3.p3d
• C:\Program Files\Splunk\bin\_ssl.p39d
• C:\Program Files\Splunk\bin\_ssl.p3d
• C:\Program Files\Splunk\bin\_testbuffer.p39d
• C:\Program Files\Splunk\bin\_testbuffer.p3d
• C:\Program Files\Splunk\bin\_testcapi.p39d
• C:\Program Files\Splunk\bin\_testcapi.p3d
• C:\Program Files\Splunk\bin\_testconsole.p39d
• C:\Program Files\Splunk\bin\_testconsole.p3d
• C:\Program Files\Splunk\bin\_testimportmultiple.p39d
• C:\Program Files\Splunk\bin\_testimportmultiple.p3d
• C:\Program Files\Splunk\bin\_testinternalcapi.p39d
• C:\Program Files\Splunk\bin\_testmultiphase.p39d
• C:\Program Files\Splunk\bin\_testmultiphase.p3d
• C:\Program Files\Splunk\bin\_uuid.p39d
• C:\Program Files\Splunk\bin\_win32sysloader.p39d
• C:\Program Files\Splunk\bin\_win32sysloader.p3d
• C:\Program Files\Splunk\bin\_winxptheme.p39d
• C:\Program Files\Splunk\bin\_winxptheme.p3d
• C:\Program Files\Splunk\bin\_zoneinfo.p39d
• C:\Program Files\Splunk\bin\api-ms-win-core-console-l1-1-0.dll
• C:\Program Files\Splunk\bin\api-ms-win-core-datetime-l1-1-0.dll
• C:\Program Files\Splunk\bin\api-ms-win-core-debug-l1-1-0.dll
• C:\Program Files\Splunk\bin\api-ms-win-core-errorhandling-l1-1-0.dll
• C:\Program Files\Splunk\bin\api-ms-win-core-file-l1-1-0.dll
• C:\Program Files\Splunk\bin\api-ms-win-core-file-l1-2-0.dll
• C:\Program Files\Splunk\bin\api-ms-win-core-file-l2-1-0.dll
• C:\Program Files\Splunk\bin\api-ms-win-core-handle-l1-1-0.dll
• C:\Program Files\Splunk\bin\api-ms-win-core-heap-l1-1-0.dll
• C:\Program Files\Splunk\bin\api-ms-win-core-interlocked-l1-1-0.dll
• C:\Program Files\Splunk\bin\api-ms-win-core-libraryloader-l1-1-0.dll
• C:\Program Files\Splunk\bin\api-ms-win-core-localization-l1-2-0.dll
• C:\Program Files\Splunk\bin\api-ms-win-core-memory-l1-1-0.dll
• C:\Program Files\Splunk\bin\api-ms-win-core-namedpipe-l1-1-0.dll
• C:\Program Files\Splunk\bin\api-ms-win-core-processenvironment-l1-1-0.dll
• C:\Program Files\Splunk\bin\api-ms-win-core-processthreads-l1-1-0.dll
• C:\Program Files\Splunk\bin\api-ms-win-core-processthreads-l1-1-1.dll
• C:\Program Files\Splunk\bin\api-ms-win-core-profile-l1-1-0.dll
• C:\Program Files\Splunk\bin\api-ms-win-core-rtlsupport-l1-1-0.dll
• C:\Program Files\Splunk\bin\api-ms-win-core-string-l1-1-0.dll
• C:\Program Files\Splunk\bin\api-ms-win-core-synch-l1-1-0.dll
• C:\Program Files\Splunk\bin\api-ms-win-core-synch-l1-2-0.dll
• C:\Program Files\Splunk\bin\api-ms-win-core-sysinfo-l1-1-0.dll
• C:\Program Files\Splunk\bin\api-ms-win-core-timezone-l1-1-0.dll
• C:\Program Files\Splunk\bin\api-ms-win-core-util-l1-1-0.dll
• C:\Program Files\Splunk\bin\api-ms-win-crt-conio-l1-1-0.dll
• C:\Program Files\Splunk\bin\api-ms-win-crt-convert-l1-1-0.dll
• C:\Program Files\Splunk\bin\api-ms-win-crt-environment-l1-1-0.dll
• C:\Program Files\Splunk\bin\api-ms-win-crt-filesystem-l1-1-0.dll
• C:\Program Files\Splunk\bin\api-ms-win-crt-heap-l1-1-0.dll
• C:\Program Files\Splunk\bin\api-ms-win-crt-locale-l1-1-0.dll
• C:\Program Files\Splunk\bin\api-ms-win-crt-math-l1-1-0.dll
• C:\Program Files\Splunk\bin\api-ms-win-crt-multibyte-l1-1-0.dll
• C:\Program Files\Splunk\bin\api-ms-win-crt-private-l1-1-0.dll
• C:\Program Files\Splunk\bin\api-ms-win-crt-process-l1-1-0.dll
• C:\Program Files\Splunk\bin\api-ms-win-crt-runtime-l1-1-0.dll
• C:\Program Files\Splunk\bin\api-ms-win-crt-stdio-l1-1-0.dll
• C:\Program Files\Splunk\bin\api-ms-win-crt-string-l1-1-0.dll
• C:\Program Files\Splunk\bin\api-ms-win-crt-time-l1-1-0.dll
• C:\Program Files\Splunk\bin\api-ms-win-crt-utility-l1-1-0.dll
• C:\Program Files\Splunk\bin\archive.dll
• C:\Program Files\Splunk\bin\bloom.exe
• C:\Program Files\Splunk\bin\bson-1.0.dll
• C:\Program Files\Splunk\bin\btool.exe
• C:\Program Files\Splunk\bin\btprobe.exe
• C:\Program Files\Splunk\bin\builder.cp37-win_amd64.p3d
• C:\Program Files\Splunk\bin\builder.cp39-win_amd64.p39d
• C:\Program Files\Splunk\bin\classify.exe
• C:\Program Files\Splunk\bin\clean.cp37-win_amd64.p3d
• C:\Program Files\Splunk\bin\clean.cp39-win_amd64.p39d
• C:\Program Files\Splunk\bin\coldToFrozenExample.py
• C:\Program Files\Splunk\bin\compsup.exe
• C:\Program Files\Splunk\bin\copyright.txt

Registry that is not removed:

• HKEY_CURRENT_USER\Software\Microsoft\Splunk Enterprise
• HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Products\F62D62C79D688B741974A5CFFFFCF875
• HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{7C26D26F-86D9-47B8-9147-5AFCFFCF8F57}
• HKEY_LOCAL_MACHINE\Software\Splunk

Additional registry values that you should clean:

• HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Products\F62D62C79D688B741974A5CFFFFCF875\ProductName
• HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\Folders\C:\Program Files\Splunk\
• HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\Folders\C:\Windows\Installer\{7C26D26F-86D9-47B8-9147-5AFCFFCF8F57}\
• HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\splknetdrv\Description
• HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Splunkd\Description
• HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Splunkd\ImagePath
• HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\splunkdrv\DisplayName
• HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\SplunkForwarder\Description

How to remove Splunk Enterprise from your computer with the help of Advanced Uninstaller PRO

Splunk Enterprise is a program marketed by Splunk, Inc.. Sometimes, computer users decide to erase it. This can be efortful because doing this manually takes some knowledge related to removing Windows programs manually. One of the best SIMPLE practice to erase Splunk Enterprise is to use Advanced Uninstaller PRO. Here are some detailed instructions about how to do this:





1. If you don't have Advanced Uninstaller PRO already installed on your Windows PC, add it. This is good because Advanced Uninstaller PRO is an efficient uninstaller and all around utility to clean your Windows PC.

DOWNLOAD NOW

• go to Download Link
• download the setup by pressing the green DOWNLOAD NOW button
• install Advanced Uninstaller PRO

2. Start Advanced Uninstaller PRO. It's recommended to take your time to admire Advanced Uninstaller PRO's design and wealth of tools available. Advanced Uninstaller PRO is a very good package of utilities.

3. Click on the General Tools button


4. Activate the Uninstall Programs tool


5. A list of the programs installed on the PC will be made available to you

6. Scroll the list of programs until you locate Splunk Enterprise or simply click the Search field and type in "Splunk Enterprise". The Splunk Enterprise program will be found very quickly. Notice that after you click Splunk Enterprise in the list of apps, the following information regarding the application is shown to you:

• Safety rating (in the left lower corner). This explains the opinion other users have regarding Splunk Enterprise, from "Highly recommended" to "Very dangerous".
• Opinions by other users - Click on the Read reviews button.
• Details regarding the application you want to remove, by pressing the Properties button.

7. Click the Uninstall button. A window asking you to confirm will appear. accept the removal by pressing Uninstall. Advanced Uninstaller PRO will then remove Splunk Enterprise.


8. After removing Splunk Enterprise, Advanced Uninstaller PRO will offer to run an additional cleanup. Press Next to proceed with the cleanup. All the items of Splunk Enterprise that have been left behind will be found and you will be able to delete them. By uninstalling Splunk Enterprise with Advanced Uninstaller PRO, you can be sure that no Windows registry entries, files or directories are left behind on your computer.

Your Windows computer will remain clean, speedy and ready to serve you properly.

Disclaimer

This page is not a recommendation to uninstall Splunk Enterprise by Splunk, Inc. from your PC, we are not saying that Splunk Enterprise by Splunk, Inc. is not a good application for your computer. This text only contains detailed info on how to uninstall Splunk Enterprise supposing you decide this is what you want to do. The information above contains registry and disk entries that our application Advanced Uninstaller PRO stumbled upon and classified as "leftovers" on other users' computers.