Getting Data In

UF in Linux how to configure

fazilhussain
Explorer

Dear Friends.

But I have some doughs I installed the UF in Centos and followed this cmd.
1: /Command: /opt/splunkforwarder/bin/splunk enable boot-start [successful]
2 😕 Now Configure Forwarder connection to Index Server

Command: /opt/splunkforwarder/bin/splunk add forward-server host. domain:9997 [SUCCESSFUL]

NOW MY QUESTION IS :
I have installed the UF in the below mention Path. Plz let me know if the path is correct.

[root@localhost] # cd/opt/splunkforwarder/
[root@localhost splunkforwarder] # ls -l
--r--r--r-- 1 splunk splunk 7555 nov 18 time splunkforwarder-6.5.1 [installed]

And i cannot access the Below Path to configure the Outputs.conf.

/opt/splunkforwarder/etc/system/local/outputs.conf –

I can only go till /opt/splunkforwarder/etc/ Under /etc/ I cannot find the /system/local/outputs.conf/

I request you to please help me on this.

Waiting for your reply.
Regards,

Tags (1)
0 Karma

skalliger
SplunkTrust
SplunkTrust

Hi fazilhussain,

that path is correct. Splunk's installation ships with default settings which are found under $SPLUNK_HOME/etc/system/default/.
Do not make changes there. Copy the outputs.conf from the default folder to the local folder and make your configurations there.

Edit: Addtitional info - The default configs are only used for deploying apps. Configs in etc/system/local will overwride the standard/default settings.

Skalli

0 Karma
Get Updates on the Splunk Community!

Index This | I am a number, but when you add ‘G’ to me, I go away. What number am I?

March 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...

What’s New in Splunk App for PCI Compliance 5.3.1?

The Splunk App for PCI Compliance allows customers to extend the power of their existing Splunk solution with ...

Extending Observability Content to Splunk Cloud

Register to join us !   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to ...