Splunk Enterprise

A way to uninstall Splunk Enterprise from your computer

This page is about Splunk Enterprise for Windows. Below you can find details on how to remove it from your computer. It is made by Splunk, Inc.. Further information on Splunk, Inc. can be found here. Splunk Enterprise is normally set up in the C:\Program Files\Splunk folder, however this location can vary a lot depending on the user's choice when installing the program. The complete uninstall command line for Splunk Enterprise is MsiExec.exe /X{D5AF173B-FA33-402B-8EF7-79DCED01A40B}. splunk.exe is the Splunk Enterprise's primary executable file and it occupies close to 519.50 KB (531968 bytes) on disk.

The executables below are part of Splunk Enterprise. They take about 341.77 MB (358374640 bytes) on disk.

• bloom.exe (83.00 KB)
• btool.exe (83.00 KB)
• btprobe.exe (83.00 KB)
• classify.exe (83.00 KB)
• exporttool.exe (83.00 KB)
• importtool.exe (83.00 KB)
• jsmin.exe (26.00 KB)
• locktest.exe (33.00 KB)
• locktool.exe (2.87 MB)
• mongod-3.4.exe (25.98 MB)
• mongod.exe (30.09 MB)
• mongodump.exe (17.05 MB)
• mongorestore.exe (17.08 MB)
• node.exe (19.67 MB)
• openssl.exe (501.50 KB)
• pcregextest.exe (2.88 MB)
• python.exe (99.50 KB)
• python2.exe (39.50 KB)
• python3.exe (99.50 KB)
• recover-metadata.exe (83.00 KB)
• searchtest.exe (83.00 KB)
• signtool.exe (83.00 KB)
• splunk-admon.exe (17.02 MB)
• splunk-compresstool.exe (78.50 KB)
• splunk-MonitorNoHandle.exe (16.95 MB)
• splunk-netmon.exe (17.05 MB)
• splunk-optimize-lex.exe (319.50 KB)
• splunk-optimize.exe (323.50 KB)
• splunk-perfmon.exe (17.09 MB)
• splunk-powershell.exe (17.02 MB)
• splunk-regmon.exe (17.08 MB)
• splunk-winevtlog.exe (17.18 MB)
• splunk-winhostinfo.exe (16.96 MB)
• splunk-winprintmon.exe (17.00 MB)
• splunk-wmi.exe (16.94 MB)
• splunk.exe (519.50 KB)
• splunkd.exe (47.99 MB)
• srm.exe (177.00 KB)
• tsidxprobe.exe (323.50 KB)
• tsidxprobe_plo.exe (327.00 KB)
• walklex.exe (314.50 KB)
• wininst-6.0.exe (68.50 KB)
• wininst-7.1.exe (72.50 KB)
• wininst-8.0.exe (68.50 KB)
• wininst-9.0-amd64.exe (227.00 KB)
• wininst-9.0.exe (200.00 KB)
• cli-32.exe (72.50 KB)
• cli-64.exe (81.50 KB)
• cli.exe (72.50 KB)
• gui-32.exe (72.50 KB)
• gui-64.exe (82.00 KB)
• gui.exe (72.50 KB)
• easy_install-2.7.exe (81.50 KB)
• easy_install.exe (81.50 KB)
• wheel.exe (81.50 KB)
• wininst-10.0-amd64.exe (225.50 KB)
• wininst-10.0.exe (195.00 KB)
• wininst-14.0-amd64.exe (582.50 KB)
• wininst-14.0.exe (456.00 KB)
• wininst-6.0.exe (68.50 KB)
• wininst-7.1.exe (72.50 KB)
• wininst-8.0.exe (68.50 KB)
• wininst-9.0-amd64.exe (227.50 KB)
• wininst-9.0.exe (200.00 KB)
• cli-32.exe (72.50 KB)
• cli-64.exe (81.50 KB)
• cli.exe (72.50 KB)
• gui-32.exe (72.50 KB)
• gui-64.exe (82.00 KB)
• gui.exe (72.50 KB)
• easy_install-3.7.exe (81.50 KB)
• easy_install.exe (81.50 KB)
• wheel.exe (81.50 KB)

...click to view all...

This info is about Splunk Enterprise version 8.2.4.0 only. You can find below a few links to other Splunk Enterprise releases:

• 6.6.3.0
• 8.0.1.0
• 8.0.6.0
• 6.4.3.0
• 8.0.2.0
• 9.1.0.0
• 8.1.0.0
• 9.0.2.0
• 6.5.3.0
• 6.3.1.0
• 8.2.2.0
• 7.0.2.0
• 8.0.5.0
• 9.0.3.0
• 7.1.1.0
• 6.2.3.264376
• 7.3.1.0
• 6.4.1.0
• 9.0.5.0
• 8.2.3.0
• 7.2.0.0
• 6.2.6.274160
• 7.3.9.0
• 9.0.1.0
• 8.2.5.0
• 7.2.4.0
• 8.0.3.0
• 8.0.4.1
• 7.0.1.0
• 8.1.1.0
• 8.1.2.0
• 9.2.1.0
• 6.2.1.245427
• 8.2.0.0
• 9.0.0.1
• 6.5.2.0
• 7.3.0.0
• 9.2.0.1
• 7.3.4.0
• 6.5.0.0
• 6.2.0.237341
• 6.2.2.255606
• 8.0.0.0
• 7.0.3.0
• 6.4.11.0
• 6.4.0.0
• 7.1.0.0
• 8.2.1.0
• 6.4.2.0
• 8.0.4.0
• 9.1.0.1
• 8.1.3.0
• 8.2.2.1
• 7.2.6.0
• 7.0.0.0
• 7.1.2.0
• 9.0.4.0
• 6.3.2.0
• 7.2.2.0
• 6.6.2.0
• 6.6.1.0
• 9.0.0.0
• 9.1.2.0
• 9.0.4.1
• 6.2.4.271043
• 9.1.0.2
• 8.1.0.1
• 6.6.0.0
• 6.3.5.0
• 6.5.1.0
• 8.2.6.0
• 8.0.2.1
• 6.3.3.0
• 6.3.0.0
• 7.2.3.0
• 9.1.1.0
• 7.3.3.0

...click to view all...
Some files and registry entries are frequently left behind when you uninstall Splunk Enterprise.

Folders remaining:

• C:\Program Files\Splunk
• C:\Users\%user%\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.splunk.com_0.indexeddb.leveldb

Usually, the following files remain on disk:

• C:\Program Files\Splunk\bin\_asyncio.p3d
• C:\Program Files\Splunk\bin\_bz2.p3d
• C:\Program Files\Splunk\bin\_ctypes.p3d
• C:\Program Files\Splunk\bin\_ctypes.pyd
• C:\Program Files\Splunk\bin\_ctypes_test.p3d
• C:\Program Files\Splunk\bin\_decimal.p3d
• C:\Program Files\Splunk\bin\_elementpath.cp37-win_amd64.p3d
• C:\Program Files\Splunk\bin\_elementpath.pyd
• C:\Program Files\Splunk\bin\_elementtree.p3d
• C:\Program Files\Splunk\bin\_elementtree.pyd
• C:\Program Files\Splunk\bin\_hashlib.p3d
• C:\Program Files\Splunk\bin\_msi.p3d
• C:\Program Files\Splunk\bin\_multiprocessing.p3d
• C:\Program Files\Splunk\bin\_multiprocessing.pyd
• C:\Program Files\Splunk\bin\_overlapped.p3d
• C:\Program Files\Splunk\bin\_queue.p3d
• C:\Program Files\Splunk\bin\_socket.p3d
• C:\Program Files\Splunk\bin\_socket.pyd
• C:\Program Files\Splunk\bin\_ssl.p3d
• C:\Program Files\Splunk\bin\_ssl.pyd
• C:\Program Files\Splunk\bin\_testbuffer.p3d
• C:\Program Files\Splunk\bin\_testcapi.p3d
• C:\Program Files\Splunk\bin\_testcapi.pyd
• C:\Program Files\Splunk\bin\_testconsole.p3d
• C:\Program Files\Splunk\bin\_testimportmultiple.p3d
• C:\Program Files\Splunk\bin\_testmultiphase.p3d
• C:\Program Files\Splunk\bin\_win32sysloader.p3d
• C:\Program Files\Splunk\bin\_win32sysloader.pyd
• C:\Program Files\Splunk\bin\api-ms-win-core-console-l1-1-0.dll
• C:\Program Files\Splunk\bin\api-ms-win-core-datetime-l1-1-0.dll
• C:\Program Files\Splunk\bin\api-ms-win-core-debug-l1-1-0.dll
• C:\Program Files\Splunk\bin\api-ms-win-core-errorhandling-l1-1-0.dll
• C:\Program Files\Splunk\bin\api-ms-win-core-file-l1-1-0.dll
• C:\Program Files\Splunk\bin\api-ms-win-core-file-l1-2-0.dll
• C:\Program Files\Splunk\bin\api-ms-win-core-file-l2-1-0.dll
• C:\Program Files\Splunk\bin\api-ms-win-core-handle-l1-1-0.dll
• C:\Program Files\Splunk\bin\api-ms-win-core-heap-l1-1-0.dll
• C:\Program Files\Splunk\bin\api-ms-win-core-interlocked-l1-1-0.dll
• C:\Program Files\Splunk\bin\api-ms-win-core-libraryloader-l1-1-0.dll
• C:\Program Files\Splunk\bin\api-ms-win-core-localization-l1-2-0.dll
• C:\Program Files\Splunk\bin\api-ms-win-core-memory-l1-1-0.dll
• C:\Program Files\Splunk\bin\api-ms-win-core-namedpipe-l1-1-0.dll
• C:\Program Files\Splunk\bin\api-ms-win-core-processenvironment-l1-1-0.dll
• C:\Program Files\Splunk\bin\api-ms-win-core-processthreads-l1-1-0.dll
• C:\Program Files\Splunk\bin\api-ms-win-core-processthreads-l1-1-1.dll
• C:\Program Files\Splunk\bin\api-ms-win-core-profile-l1-1-0.dll
• C:\Program Files\Splunk\bin\api-ms-win-core-rtlsupport-l1-1-0.dll
• C:\Program Files\Splunk\bin\api-ms-win-core-string-l1-1-0.dll
• C:\Program Files\Splunk\bin\api-ms-win-core-synch-l1-1-0.dll
• C:\Program Files\Splunk\bin\api-ms-win-core-synch-l1-2-0.dll
• C:\Program Files\Splunk\bin\api-ms-win-core-sysinfo-l1-1-0.dll
• C:\Program Files\Splunk\bin\api-ms-win-core-timezone-l1-1-0.dll
• C:\Program Files\Splunk\bin\api-ms-win-core-util-l1-1-0.dll
• C:\Program Files\Splunk\bin\api-ms-win-crt-conio-l1-1-0.dll
• C:\Program Files\Splunk\bin\api-ms-win-crt-convert-l1-1-0.dll
• C:\Program Files\Splunk\bin\api-ms-win-crt-environment-l1-1-0.dll
• C:\Program Files\Splunk\bin\api-ms-win-crt-filesystem-l1-1-0.dll
• C:\Program Files\Splunk\bin\api-ms-win-crt-heap-l1-1-0.dll
• C:\Program Files\Splunk\bin\api-ms-win-crt-locale-l1-1-0.dll
• C:\Program Files\Splunk\bin\api-ms-win-crt-math-l1-1-0.dll
• C:\Program Files\Splunk\bin\api-ms-win-crt-multibyte-l1-1-0.dll
• C:\Program Files\Splunk\bin\api-ms-win-crt-private-l1-1-0.dll
• C:\Program Files\Splunk\bin\api-ms-win-crt-process-l1-1-0.dll
• C:\Program Files\Splunk\bin\api-ms-win-crt-runtime-l1-1-0.dll
• C:\Program Files\Splunk\bin\api-ms-win-crt-stdio-l1-1-0.dll
• C:\Program Files\Splunk\bin\api-ms-win-crt-string-l1-1-0.dll
• C:\Program Files\Splunk\bin\api-ms-win-crt-time-l1-1-0.dll
• C:\Program Files\Splunk\bin\api-ms-win-crt-utility-l1-1-0.dll
• C:\Program Files\Splunk\bin\archive.dll
• C:\Program Files\Splunk\bin\bloom.exe
• C:\Program Files\Splunk\bin\bson-1.0.dll
• C:\Program Files\Splunk\bin\btool.exe
• C:\Program Files\Splunk\bin\btprobe.exe
• C:\Program Files\Splunk\bin\builder.cp37-win_amd64.p3d
• C:\Program Files\Splunk\bin\builder.pyd
• C:\Program Files\Splunk\bin\bz2.pyd
• C:\Program Files\Splunk\bin\classify.exe
• C:\Program Files\Splunk\bin\clean.cp37-win_amd64.p3d
• C:\Program Files\Splunk\bin\clean.pyd
• C:\Program Files\Splunk\bin\coldToFrozenExample.py
• C:\Program Files\Splunk\bin\copyright.txt
• C:\Program Files\Splunk\bin\crypto.pyd
• C:\Program Files\Splunk\bin\dbmanipulator.py
• C:\Program Files\Splunk\bin\diff.cp37-win_amd64.p3d
• C:\Program Files\Splunk\bin\diff.pyd
• C:\Program Files\Splunk\bin\etree.cp37-win_amd64.p3d
• C:\Program Files\Splunk\bin\etree.pyd
• C:\Program Files\Splunk\bin\exporttool.exe
• C:\Program Files\Splunk\bin\fill_summary_index.py
• C:\Program Files\Splunk\bin\genAuditKeys.py
• C:\Program Files\Splunk\bin\genRootCA.bat
• C:\Program Files\Splunk\bin\genSignedServerCert.py
• C:\Program Files\Splunk\bin\genWebCert.py
• C:\Program Files\Splunk\bin\importtool.exe
• C:\Program Files\Splunk\bin\installit.py
• C:\Program Files\Splunk\bin\jsmin.exe
• C:\Program Files\Splunk\bin\libeay32.dll
• C:\Program Files\Splunk\bin\libexslt.dll
• C:\Program Files\Splunk\bin\libxml2.dll
• C:\Program Files\Splunk\bin\libxmlsec.dll

Use regedit.exe to manually remove from the Windows Registry the data below:

• HKEY_CURRENT_USER\Software\Microsoft\Splunk Enterprise
• HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Products\B371FA5D33AFB204E87F97CDDE104AB0
• HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{D5AF173B-FA33-402B-8EF7-79DCED01A40B}
• HKEY_LOCAL_MACHINE\Software\Splunk

Supplementary registry values that are not removed:

• HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Products\B371FA5D33AFB204E87F97CDDE104AB0\ProductName
• HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\Folders\C:\Program Files\Splunk\
• HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\Folders\C:\windows\Installer\{D5AF173B-FA33-402B-8EF7-79DCED01A40B}\
• HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\splknetdrv\Description
• HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Splunkd\Description
• HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Splunkd\ImagePath
• HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\splunkdrv\DisplayName

A way to remove Splunk Enterprise with Advanced Uninstaller PRO

Splunk Enterprise is an application released by the software company Splunk, Inc.. Sometimes, users want to uninstall this application. Sometimes this is efortful because performing this by hand requires some experience related to removing Windows applications by hand. One of the best SIMPLE practice to uninstall Splunk Enterprise is to use Advanced Uninstaller PRO. Here is how to do this:





1. If you don't have Advanced Uninstaller PRO on your PC, add it. This is a good step because Advanced Uninstaller PRO is a very useful uninstaller and general tool to take care of your computer.

DOWNLOAD NOW

• navigate to Download Link
• download the program by clicking on the DOWNLOAD NOW button
• set up Advanced Uninstaller PRO

2. Run Advanced Uninstaller PRO. It's recommended to take your time to get familiar with the program's interface and number of functions available. Advanced Uninstaller PRO is a very good package of tools.

3. Press the General Tools button


4. Activate the Uninstall Programs tool


5. A list of the applications existing on the computer will appear

6. Scroll the list of applications until you locate Splunk Enterprise or simply activate the Search field and type in "Splunk Enterprise". The Splunk Enterprise program will be found very quickly. Notice that when you select Splunk Enterprise in the list of applications, some data about the program is shown to you:

• Star rating (in the left lower corner). The star rating tells you the opinion other people have about Splunk Enterprise, ranging from "Highly recommended" to "Very dangerous".
• Opinions by other people - Press the Read reviews button.
• Details about the program you wish to remove, by clicking on the Properties button.

7. Press the Uninstall button. A window asking you to confirm will show up. accept the uninstall by clicking Uninstall. Advanced Uninstaller PRO will automatically uninstall Splunk Enterprise.


8. After uninstalling Splunk Enterprise, Advanced Uninstaller PRO will offer to run an additional cleanup. Click Next to start the cleanup. All the items of Splunk Enterprise that have been left behind will be found and you will be able to delete them. By uninstalling Splunk Enterprise using Advanced Uninstaller PRO, you are assured that no registry items, files or directories are left behind on your disk.

Your system will remain clean, speedy and able to take on new tasks.

Disclaimer

The text above is not a piece of advice to remove Splunk Enterprise by Splunk, Inc. from your computer, nor are we saying that Splunk Enterprise by Splunk, Inc. is not a good application for your PC. This page simply contains detailed instructions on how to remove Splunk Enterprise supposing you want to. Here you can find registry and disk entries that our application Advanced Uninstaller PRO stumbled upon and classified as "leftovers" on other users' computers.