
The Splunk Universal Forwarder is a component of Splunk to collect data on machine and forward it to an indexer.
It's a good idea to specify either a RECEIVING_INDEXER or DEPLOYMENT_SERVER. You might do something like:
choco install splunk-universalforwarder --params="RECEIVING_INDEXER=somehost:9997 DEPLOYMENT_SERVER=depserver:8089"
Details about all the parameters are at the Splunk docs:
http://docs.splunk.com/Documentation/Splunk/latest/Admin/DeployingSplunkonWindows
The GitHub home for this package is: https://github.com/dagryph/chocolatey-splunkforwarder