unique values of pathnames of
(
folder it
)
of
(
it as string as trimmed string
)
of values "InstallLocation" of keys whose
(
exists values "DisplayName" whose
(
it as string contains "UniversalForwarder"
)
of it AND exists values whose
(
it as string as lowercase contains "splunk"
)
of it
)
of keys "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall" of
(
x64 registries; x32 registries
)
unique values of pathnames of (folder it) of (it as string as trimmed string) of values "InstallLocation" of keys whose(exists values "DisplayName" whose(it as string contains "UniversalForwarder") of it AND exists values whose(it as string as lowercase contains "splunk") of it) of keys "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall" of (x64 registries; x32 registries)
