Getting Data In

UF in Linux how to configure

fazilhussain
Explorer

Dear Friends.

But I have some doughs I installed the UF in Centos and followed this cmd.
1: /Command: /opt/splunkforwarder/bin/splunk enable boot-start [successful]
2 😕 Now Configure Forwarder connection to Index Server

Command: /opt/splunkforwarder/bin/splunk add forward-server host. domain:9997 [SUCCESSFUL]

NOW MY QUESTION IS :
I have installed the UF in the below mention Path. Plz let me know if the path is correct.

[root@localhost] # cd/opt/splunkforwarder/
[root@localhost splunkforwarder] # ls -l
--r--r--r-- 1 splunk splunk 7555 nov 18 time splunkforwarder-6.5.1 [installed]

And i cannot access the Below Path to configure the Outputs.conf.

/opt/splunkforwarder/etc/system/local/outputs.conf –

I can only go till /opt/splunkforwarder/etc/ Under /etc/ I cannot find the /system/local/outputs.conf/

I request you to please help me on this.

Waiting for your reply.
Regards,

Tags (1)
0 Karma

skalliger
SplunkTrust
SplunkTrust

Hi fazilhussain,

that path is correct. Splunk's installation ships with default settings which are found under $SPLUNK_HOME/etc/system/default/.
Do not make changes there. Copy the outputs.conf from the default folder to the local folder and make your configurations there.

Edit: Addtitional info - The default configs are only used for deploying apps. Configs in etc/system/local will overwride the standard/default settings.

Skalli

0 Karma
Get Updates on the Splunk Community!

What's new in Splunk Cloud Platform 9.1.2312?

Hi Splunky people! We are excited to share the newest updates in Splunk Cloud Platform 9.1.2312! Analysts can ...

What’s New in Splunk Security Essentials 3.8.0?

Splunk Security Essentials (SSE) is an app that can amplify the power of your existing Splunk Cloud Platform, ...

Let’s Get You Certified – Vegas-Style at .conf24

Are you ready to level up your Splunk game? Then, let’s get you certified live at .conf24 – our annual user ...