Getting Data In

Is there a CLI option to force the answer "no" during universal forwarder startup when asked if I want to change the port number to something else?

jghirard
New Member

I am planning to do a silent install of a Splunk Universal Forwarder (v6.3.0) to several hundred Windows servers. Some servers use the default port 8089 for some other app. When the Splunk service starts, I get the question asking me if I want to change the port number to something else. I don't have an easy way to find out if I have the same available port on all of my servers. I would really just prefer to have the startup of the agent just answer "no" to the question and continue to start the service without user intervention. We don't use the management port for deployments or remote management. Is there some command line switch that I can use to force the answer at startup so it doesn't stop?

0 Karma

somesoni2
Revered Legend

I would suggest to use some different port which may be available on all the forwarder servers, than using the default 8089. You can create a web.conf (after installation is complete and before you're trying to start Splunk service) with following option and then restart Splunk (update the port numbers per your environment)

[settings]
httpport = 98765
mgmtHostPort = 127.0.0.1:12345
0 Karma
Get Updates on the Splunk Community!

Built-in Service Level Objectives Management to Bridge the Gap Between Service & ...

Wednesday, May 29, 2024  |  11AM PST / 2PM ESTRegister now and join us to learn more about how you can ...

Get Your Exclusive Splunk Certified Cybersecurity Defense Engineer at Splunk .conf24 ...

We’re excited to announce a new Splunk certification exam being released at .conf24! If you’re headed to Vegas ...

Share Your Ideas & Meet the Lantern team at .Conf! Plus All of This Month’s New ...

Splunk Lantern is Splunk’s customer success center that provides advice from Splunk experts on valuable data ...