Uninstall Splunk Universal Forwarder (Windows)

uninstall-splunk.ps1

# Get the list of installed programs
$installedPrograms = Get-ItemProperty HKLM:\Software\Microsoft\Windows\CurrentVersion\Uninstall\* | Select-Object DisplayName
$containsSplunk = $installedPrograms.DisplayName -like "*UniversalForwarder*"

if ($containsSplunk) {
    Write-Output "[INFO] Splunk found. Removing"
    if (Get-Service -Name SplunkForwarder -ErrorAction SilentlyContinue) {
        Start-Process -FilePath "C:\Program Files\SplunkUniversalForwarder\bin\splunk.exe" -ArgumentList "stop" -Wait -NoNewWindow
    }
    $productCode = Get-WmiObject Win32_Product -Filter "name='UniversalForwarder'" | ForEach-Object { $_.IdentifyingNumber }
    . msiexec /x$productCode /qn
    Write-Output "[INFO] Splunk DELETED!"
}
else {
    Write-Output "[INFO] Splunk not found. Skipping"
}