Getting Data In

Is there a CLI option to force the answer "no" during universal forwarder startup when asked if I want to change the port number to something else?

jghirard
New Member

I am planning to do a silent install of a Splunk Universal Forwarder (v6.3.0) to several hundred Windows servers. Some servers use the default port 8089 for some other app. When the Splunk service starts, I get the question asking me if I want to change the port number to something else. I don't have an easy way to find out if I have the same available port on all of my servers. I would really just prefer to have the startup of the agent just answer "no" to the question and continue to start the service without user intervention. We don't use the management port for deployments or remote management. Is there some command line switch that I can use to force the answer at startup so it doesn't stop?

0 Karma

somesoni2
Revered Legend

I would suggest to use some different port which may be available on all the forwarder servers, than using the default 8089. You can create a web.conf (after installation is complete and before you're trying to start Splunk service) with following option and then restart Splunk (update the port numbers per your environment)

[settings]
httpport = 98765
mgmtHostPort = 127.0.0.1:12345
0 Karma
Get Updates on the Splunk Community!

.conf24 | Registration Open!

Hello, hello! I come bearing good news: Registration for .conf24 is now open!   conf is Splunk’s rad annual ...

ICYMI - Check out the latest releases of Splunk Edge Processor

Splunk is pleased to announce the latest enhancements to Splunk Edge Processor.  HEC Receiver authorization ...

Introducing the 2024 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...