Dear Friends.
But I have some doughs I installed the UF in Centos and followed this cmd.
1: /Command: /opt/splunkforwarder/bin/splunk enable boot-start [successful]
2 😕 Now Configure Forwarder connection to Index Server
Command: /opt/splunkforwarder/bin/splunk add forward-server host. domain:9997 [SUCCESSFUL]
NOW MY QUESTION IS :
I have installed the UF in the below mention Path. Plz let me know if the path is correct.
[root@localhost] # cd/opt/splunkforwarder/
[root@localhost splunkforwarder] # ls -l
--r--r--r-- 1 splunk splunk 7555 nov 18 time splunkforwarder-6.5.1 [installed]
And i cannot access the Below Path to configure the Outputs.conf.
/opt/splunkforwarder/etc/system/local/outputs.conf –
I can only go till /opt/splunkforwarder/etc/ Under /etc/ I cannot find the /system/local/outputs.conf/
I request you to please help me on this.
Waiting for your reply.
Regards,
Hi fazilhussain,
that path is correct. Splunk's installation ships with default settings which are found under $SPLUNK_HOME/etc/system/default/.
Do not make changes there. Copy the outputs.conf from the default folder to the local folder and make your configurations there.
Edit: Addtitional info - The default configs are only used for deploying apps. Configs in etc/system/local will overwride the standard/default settings.
Skalli